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Preface 


Welcome to the 7954/7955/7956 Hardware Users Guide. This document provides register 
and data structure descriptions for the 7954, 7955 and 7956 Algorithm Accelerators. This 
document is intended for use as a general guide for configuring the 7954, 7955 and 7956 
for data processing. 


The 7954, 7955 and 7956 are part of the 79xx family of algorithm accelerators, which 
began with the Hifn 7951. This document is intended to be a companion document to the 
7954 Data Sheet (DS-0123), the 7955 Data Sheet (DS-0114) and the 7956 Data Sheet 
(DS-0115). The data sheets contain device timing and electrical specifications, functional 
block diagrams, and a performance overview. 


The 7954, 7955 and 7956 Algorithm Accelerators are logically identical parts and both use 
the exact same data structures and contain identical register sets. Register configuration, 
command and data processing, and memory organization are the same with 7954, 7955 
and 7956. The only differences between the 7954, 7955 and 7956 are in device clocking 
and performance, as outlined in the 7954, 7955 and 7956 Data Sheets. 


About This Document 


This document assumes you are already familiar with the chip technology and terminology 
and have a general knowledge of the 7954, 7955 and 7956 architecture. Throughout this 
document the device names 7954, 7955 and 7956 are completely interchangeable. For 
simplicity throughout this document, all references to 7954, 7955 and 7956 will be referred 
to as 795x. 


Audience 


This document is intended for integrators and application developers responsible for and 
familiar with software and hardware architecture of a target system. 


Prerequisite 


Before proceeding you should generally understand: 
m Features of the 7954/7955/7956 Algorithm Accelerators 
m Software and hardware of the target system 


m General networking concepts 


Document Organization 


This document is organized as follows: 


m Chapter 1, Introduction, provides an operation overview. 
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m™ Chapter 2, Descriptor Structures, provides the definitions for the descriptor 
structures that control command and data flow. 


m™ Chapter 3, Command, Context, and Data Structures, provides the definitions for 
the command, context, and data structures. 








m™ Chapter 4, Data Processing, describes how data is processed by the processing 
units. 


m Chapter 5, Session Context Memory, provides information on how the context 
memory is utilized. 


m Chapter 6, Registers, provides definitions for the registers. 





m@ Chapter 7, Public Key Engine, describes the Public Key engine and how it operates. 


Customer Support 


For technical support about this product, please contact your local Hifn sales office, 
representative, or distributor. 


Web Site 


For general information about Hifn and Hifn products refer to: www.hifn.com. 
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1 Introduction 


The 7954/7955/7956 (795x) Algorithm Accelerators are functionally identical and both use 
the same data structures and contain identical register sets. The 795x contains several 
processing units—Random Number Generator, Public Key, symmetric key encryption, 
compression, padding, and authentication. The symmetric key encryption, compression, 
padding, and authentication units are combined into a single functional block called the 
Packet Engine. The 795x also contains a DMA bus master, source and destination FIFOs, a 
PCI Interface, and a MPC860/8260 Interface. 


The 795x utilizes three primary register sets for device configuration and control. The first 
register set contains the DMA Interface registers, which are used to configure and control 
DMA transfers in the 795x’s PCI mode. The second register set contains the packet engine 
registers, which are used to configure and control the packet engine. The third set controls 
and configures the Public Key engine, and Random Number Generator in the 795x. 


The 795x Packet Engine has four processing units: a compression processing unit, an 
encryption processing unit, an authentication processing unit, and a padding processing 
unit. The order of the processing units is programmable, and varies depending on whether 
the operation being performed is an encode or decode operation. Two internal FIFOs, the 
source and destination FIFOs, are used to buffer data transfers to and from the packet 
engine. Both FIFOs are 64-bytes deep. 


1.1 Reset and Initialization 


The 795x Algorithm Accelerator supports a serial EEPROM configuration interface that is 
used during hardware reset to select the host bus mode and set up critical register values. 
This configuration information may be contained in a serial EEPROM attached to the 
interface. Otherwise, a default configuration can be selected by applying a value to the 
interface signals during hardware reset. Refer to the appropriate795x Data Sheet for more 
detail on hardware configuration and reset timing. 


Once the 795x has come out of reset the host may access the 795x internal registers and 
memory. Prior to processing data, software will perform post-reset register configuration. 
In PCI mode, for example, the DMA configuration registers should be programmed to enable 
the 795x to consume the desired amount of PCI bus bandwidth for a given application. 


1.2 Command and Data Flow 


In all bus modes (PCI or MPC) commands and data may be stored in 795x local memory by 
the host. The 795x can process this internal data, store the results into another location in 
local memory and wait for the host to read those results out of local memory. In PCI mode, 
the 795x may optionally be configured as a PCI initiator. When operating as a PCI initiator, 
the 795x DMA has the ability to master commands and source data from host memory. 
Likewise, after processing has completed, the 795x can master destination data and results 
back across the PCI bus into system memory. 


Command and data flow in the 795x is controlled by descriptor ring structures that can be 
located in 795x local memory or in shared system memory. There are four descriptor rings: 
Command, Source Data, Destination Data, and Results. The rings point to memory buffers 
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that contain the actual commands, source data, destination data, and result messages. 
Descriptors are read by the 795x at the beginning of command and data processing and are 
updated when processing has completed. 


Commands, source data, result data, and result messages are all formatted into structures 
that are passed to the chip or read from the chip via the host bus interface. The formats of 
these structures are defined later in this document. 


Local memory is used to store encryption/decryption context and compression history for 
unique sessions and for commands and data for non-PCI systems. In systems that store 
descriptors or data in local memory care must be taken not to allow context to overlap the 
descriptors/buffers. Before the 795x can process source data for a specific session, the host 
must load context for that session by setting the NEWKEY and NEWIV fields in the 
command message. This context load is done on the same command that contains data. 
When the 795x processes the subsequent commands for that session, it will be able to load 
certain engine parameters, including security and compression state information, for that 
session directly from local memory. This method eliminates the need for the host CPU to 
store session context and pass it over the host bus interface when sending source data for 
each session to the 795x. 


1.3 Endianness Configuration 


The internal data endianness format of the 795x 6 is 64-bit little-endian. External host bus 
interface accesses can be configured for systems with other endianness formats. There are 
separate endianness configuration settings available for target access to 795x registers, 
Local Memory, Public Key Memory, as well as 795x initiator access to external descriptors 
and external data. 


Endianness configuration is controlled for the following data paths: 


m Target access to Registers (configured by EEPROM or HW Configuration Address 
bits) 


Target access to Local Memory (DMA Configuration Register #1) 
Target access to Public Key Memory (DMA Configuration Register #2) 


Initiator access to external descriptors (DMA Configuration Register #1) 


Initiator access to external data (Descriptor Structures) 


Initiator access to Local Memory for internal descriptors and data is always in little-endian 
format. Target access to Local Memory must be configured appropriately to preserve 
internal little-endian format. 


1.3.1Device Endianness Configuration 


Independent 2-bit fields determine the endianness of each of these 5 data paths. The 2-bit 
field is comprised of SWAP8 bit, which controls byte transposition of a 32-bit entity, and 
SWAP32 bit that controls swapping within a 64-bit entity. 
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Table 1 Endianness Configuration 


Endianness Configuration System Data Format 
Swaps [32-bit It, 
Po kittle-Endian | Little-Endian 


oT Big-Endian (Double-Word 
1 Little-Endian (Double-Word 
Reserved Swapped 


Big-Endian 





Table 2 Endianness Mapping of System Data 


System System Data Format 
Endianness 


Mode 


endian Byte eye} 
Endian 

32-bit Big- Reserved 

Byte[0] avec 
endian bvtel6] ert] eyo} 


64-bit Little- 

Endian (DW | Byte[3] | Byte[2] | Byte[1] | Byte[0] | Byte[7] | Byte[6] | Byte[5] | Byte[4] 
swapped) 

te byte 


64-bit Big- 
Endian (DW | Byte[4] | Byte[5] | Byte[6] | Byte[7] | Byte[0] | Byte[1] | Byte[2] | Byte[3] 
swapped) 
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32-bit Little-Endian 32-bit Big-Endian 
B3 | B2 | B1 BO Bo | B1 B2 | B3 
B3 | B2 | B1 | BO B3 | B2 | B1 BO 
64-bit Little-Endian 64-bit Big-Endian 
B7 | B6 | B5 | B4 B3 | B2 | B1 BO Bo | B1 B2 | B3 B4 | B5 | B6 | B7 
B7 | B6 | B5 | B4 B3 | B2 | B1 | BO B7 | B6 | B5 | B4 B3 | B2 | B1 | BO 
64-bit Little-Endian (Double-Word Swapped 64-bit Big-Endian (Double-Word Swapped 
oF B1 Bo e786 as Bt oF es e7 | Bo Bt e2 ea 
B7 | B6 | B5 | B4 B3 | B2 | B1 | BO B7 | B6 | B5 | B4 B3 | B2 | B1 | BO 




































































Figure 1 Endianness Transfer Modes 


1.4 PCI Initialization Overview 


The PCI bus interface is a PCI 2.1-compliant interface that can be configured to control the 
amount of bus bandwidth consumed. Refer to the 7954 Data Sheet (DS-0123), 7955 Data 
Sheet (DS-0114), 7956 Data Sheet (DS-0115) for more detailed information on the PCI bus 
and registers. 


The overall flow of the initialization process is as follows: 
1. Initialize the memory base address registers: 
@ Write OxFFFFFFFF to each Base Address Register. 
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@ Read back each Base Address Register to see which bits are set to determine the 
size of the address space. 


¢ Calculate the actual memory address to be used for address decoding to each 
Base Address Register. 


2. Configure other PCI parameters: 

¢ Read Base Address Register 0 (points to Packet Engine registers) 

¢ Read Base Address Register 1 (points to DMA registers) 

¢ Read Base Address Register 2 (points to local memory) 

¢ Set Master Latency Timer 

¢ Write OxFFFF to PCI Status Register to clear any outstanding error conditions 

@ Set MEMORY ACCESS ENABLE (bit 1) and BUS MASTER ENABLE (bit 2) in PCI 
Command Register to one 

@ Set Cacheline size to enable Memory Read Multiple commands (value depends on 
target memory controller) 

3. Initialize the four DMA address registers. 

4. Set the MSTRESET# and DMARESET# bits in the DMA Configuration register to zero and 
then to one. Ensure that the POLLING FREQUENCY and INVALID POLL SCALAR fields in 
the DMA Configuration register are set to zero. 

5. Write a 1 to the RESET bit in the Packet Engine Control register, and poll for it to return 
a0. 

6. Set the following bits in the Packet Engine Configuration register to configure the use of 
the internal RAM: 

7. COMPRESSION CONFIGURATION 

8. ENCRYPTION CONFIGURATION 

9. Write 0x0400 to the FIFO Configuration register. 

10. Invalidate all descriptors in all four descriptor rings. 

11. Set the four Ring Control fields of the DMA Status and Control register to 0b10 
(‘Enable’). 

12. Clear all interrupts by writing OxFFFFFFFF to the DMA Status and Control register and 
OxFFFF to the Processing Unit Status Register. 

13. Enable desired interrupts by writing to the DMA Interrupt Enable register and Processing 
Unit Interrupt Enable Register. 

14. The host sets the polling frequency in the DMA Configuration #1 register to start initiator 
cycles. 

15. The host can configure the PCI burst lengths by initializing the DMA Configuration #2 
register. 
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2 Descriptor Structures 


Command and data flow is controlled by four data structures called descriptors. Descriptors 
may be linked together to form descriptor rings. There are four descriptor rings used by the 
795x: Command, Source Data, Destination Data, and Results. Each has its own data 
format. The rings in turn point to memory buffers containing the actual commands, source 
data, destination data, and results. Command and source data descriptors are read by the 
795x at the beginning of a processing job. Destination and result descriptors are updated 
by the 795x when the processing job has completed and written to shared memory buffers. 


Descriptor structures generally reside in shared memory and are accessed by the host 
system and the 795x. They are composed of descriptors that follow the Command, Source 
Data, Result, or Destination Data Descriptor formats defined in this section. 


In all descriptors, RESERVED bits must be written as Os and ignored when read. Bits 
labeled "1" must be written as 1 and ignored when read. Bits labeled "0" must be written 
as 0 and ignored when read. 
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2.1 Command Descriptors 


Command descriptors contain pointers to command blocks. Command blocks control the 
operation of the 795x security and compression engines. Command blocks identify some 
information about the source data and how it is to be processed. 


30 2928 2625 


N 
WwW 
N 
N 
N 
a 





RESERVED COMMAND LENGTH 


RESERVED 
MASKDONE 
NOINVLD 
INCR_32 
RESERVED 
CMD_SWAP8 
CMD_SWAP32|X 






































COMMAND POINTER / JUMP POINTER 








This descriptor is used to point to a block (or blocks) of command data that is stored in system 
memory. Multiple command descriptors can be linked to form descriptor rings. This allows the 
795x to gather non-contiguous blocks of command data from system memory. 


Bit 0 is the least significant bit. RESERVED bits must be written with Os and ignored when 


read. 

[Field (| Description, 
This bit is set by the host CPU and reset by the 795x. The 795x polls 
the VALID bit of the next descriptor in each descriptor ring to determine 
when the descriptor is ready to be processed. Therefore, when the 
host software is preparing a descriptor, setting this bit to 1 must be the 
last operation performed. The 795x clears this bit to 0 as the last 
operation in processing the descriptor. If the VALID bit is set, but the 
length is set to 0 (and the JUMP bit is not set), the 795x continues to 
poll until the length becomes non-zero. 

This bit is read-only by the 795x and write-only by the host CPU. If 
this bit is set to 1 the descriptor does not contain command 
information. Instead, it contains a pointer to the next descriptor in the 
descriptor ring. This can either link a separate linear section of the 
ring, or point the end of the ring to the beginning. Software must 
ensure that these pointers are valid before starting the 795x DMA 


EAST of a command buffer. The host CPU sets this bit. 


RESERVED a a ee 


This bit is read-only by the 795x and write-only by the host CPU. When 
this bit is set, it masks the setting of the done interrupt (for the 
Command Ring). 

NOINVLD When this bit is set, the VALID bit is not set to 0 when the command is 
completed. 


INCR_32 When set, each descriptor is 32 bytes in length instead of 8 bytes 
RESERVED ee a 
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Command data endianness control. When this bit is set, the bytes 
within 32-bit Double Word fields will be transposed (see Section 1.3 for 
more information on endianness control). 


CMD_SWAP8 This control only applies to accesses on the PCI bus and doesn’t apply 
to Local Memory. Local Memory contents must be in little-endian 
format (use the LM_SWAP8 and LM_SWAP32 bits in the DMA 
Configuration Register #1 to ensure that data supplied to Local 

is in little-endian format). 
Command data endianness control. When this bit is set, the two 32-bit 
Double Word fields will be transposed (see Section 1.3 for more 
information on endianness control). 


CMD_SWAP32 This control only applies to accesses on the PCI bus and doesn’t apply 


to Local Memory. Local Memory contents must be in little-endian 

format (use the LM_SWAP8 and LM_SWAP32 bits in the DMA 

Configuration Register #1 to ensure that data supplied to Local 
is in little-endian format). 


RESERVED ene Da eee i a a 


This field is read-only by the 795x and write-only by the host CPU. This 
COMMAND LENGTH | field specifies the number of bytes in the command buffer. For all 
valid, non-jump descriptors, this value must be non-zero. 


COMMAND This field is read-only by the 795x and write-only by the host CPU. This 
POINTER/JUMP field contains the address in memory of the beginning of a command 
POINTER block. 
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2.2 Source Descriptors 


Source descriptors contain pointers to source data. Source data blocks contain the actual 
data that is to be loaded and processed by the 795x. A single command may operate on 
any number of source blocks, which are referred to as source fragments. 


Context information may be appended to the command block. In this case, the CPU must 
set the LAST bit in the descriptor that points to the context information. Alternatively, the 
context information may be prepended to the source data block. In this case the system 
must set the LAST bit in the descriptor that points to the source data. 


31 30 29 28 


26 25 24 
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RESERVED 
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MASKDON 








NOINVLD 





INCR_32 
RESERVED 





RESERVED SOURCE LENGTH 


SRC_SWAP8 
SRC_SWAP23 




















SOURCE POINTER / JUMP POINTER 





This descriptor is used to point to a block (or blocks) of source data stored in system memory. 
Multiple source descriptors may be linked to form descriptor rings. This allows the 795x to 
transfer non-contiguous blocks of source data from system memory. 


Bit 0 is the least significant bit. RESERVED bits must be written with Os and ignored when 


read. 


[Field | Description 


LAST 


RESERVED 





This bit is set by the host CPU and reset by the 795x. The 795x 
polls the VALID bit of the next descriptor in each descriptor ring to 
determine when the descriptor is ready to be processed. 


Therefore, when the host software is preparing a descriptor, 
setting this bit to 1 must be the last operation performed. The 
795x clears this bit to 0 as the last operation in processing the 
descriptor. If the VALID bit is set, but the length is set to 0 (and 
the JUMP bit is not set), the 795x continues to poll until the length 
becomes non-zero. 


This bit is read-only by the 795x and write-only by the host CPU. 
If this bit is set to 1, the descriptor does not contain source data. 
Instead, it contains a pointer to the next descriptor in the 
descriptor ring. This can either link a separate linear section of the 
ring, or point the end of the ring to the beginning. Software must 
ensure that these pointers are valid before starting the 795x DMA 


This bit designates whether the current descriptor is the last 
descriptor of the Source Data buffer. This bit is set by the host 
CPU. 


This bit is read-only by the 795x and write-only by the host CPU. 
When this bit is set, it masks the setting of the done interrupt (for 
the Source Data Ring). 
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INCR_32 When set, each descriptor is 32 bytes in length instead of 8 bytes. 
ee ee es 


RESERVED 


SRC_SWAP8 


SRC_SWAP32 


RESERVED a ea ea, 


SOURCE LENGTH 
SOURCE POINTER/JUMP 
POINTER 





Source data endianness control. When this bit is set, the bytes 
within 32-bit Double Word fields will be transposed (see Section 
1.3 for more information on endianness control). 


This control only applies to accesses on the PCI bus and doesn’t 
apply to Local Memory. Local Memory contents must be in little- 
endian format (use the LM_SWAP8 and LM_SWAP32 bits in the 
DMA Configuration Register #1 to ensure that data supplied 
is in little-endian format). 
Source data endianness control. When this bit is set, the two 32- 
bit Double Word fields will be transposed (see Section 1.3 for more 
information on endianness control). 


This control only applies to accesses on the PCI bus and doesn’t 

apply to Local Memory. Local Memory contents must be in little- 

endian format (use the LM_SWAP8 and LM_SWAP32 bits in the 

DMA Configuration Register #1 to ensure that data supplied 
is in little-endian format). 


This field is read-only by the 795x and write-only by the host CPU. 
This field specifies the number of bytes in the source buffer. For 
all valid, non-jump descriptors, this value must be non-zero. 

This field is read-only by the 795x and write-only by the host CPU. 
This field contains the address in memory of the beginning of a 
source data block. 
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2.3 Destination Descriptors 


The 795x places processed data in destination blocks. A destination descriptor contains a 
pointer to the memory location where destination block exists. 
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RESERVED 
RESERVED 
MASKDONE 
NOINVLD 
INCR_32 
RESERVED 
DEST_SWAP8 





























RESERVED DESTINATION LENGTH 


DEST_SWAP32/S 




















DESTINATION POINTER / JUMP POINTER 








The format of the Destination Data Descriptor is shown above. This descriptor is used to point 
to a block (or blocks) of destination data stored in system memory. Multiple destination data 

descriptors, which also reside in system memory, can be linked to form descriptor rings. This 

allows the 795x to transfer destination data to non-contiguous blocks in system memory. The 
structure of the Destination Descriptor is described below. 


Bit O is the least significant bit. RESERVED bits must be written with Os and ignored when 


read. 


[Field | Description 


LAST 


RESERVED a eee 


OVER 





This bit is set by the host CPU and reset by the 795x. The 795x 
polls the VALID bit of the next descriptor in each descriptor ring 
to determine when the descriptor is ready to be processed. 
Therefore, when the host software is preparing a descriptor, 
setting this bit to 1 must be the last operation performed. The 
795x clears this bit to 0 as the last operation in processing the 
descriptor. 

This bit is read-only by the 795x and write-only by the host CPU. 
If this bit is set to 1, the descriptor does not contain destination 
data. Instead, it contains a pointer to the next descriptor in the 
descriptor ring. This can either link a separate linear section of 
the ring, or point the end of the ring to the beginning. Software 
must ensure that these pointers are valid before starting the 795x 


This bit designates whether the current descriptor is the last 
descriptor of the Dest Data buffer. This bit is set by either the 
host or the 795x based on the value of the LAST bit in the DMA 
Configuration register. Please see the description of the LAST 
bit in the DMA Configuration register for details on when this 
bit must or will be set. 


This bit signifies that the 795x produced more destination data 
than was allocated in the destination descriptor (when the CPU is 
in control of the descriptor LAST flag). This bit is set under the 
same conditions that set the DEST OVER bit of the Destination 
Data Ring field (bit 25) in the DMA Status and Control 
register. This bit is only significant if the LAST bit (bit 4) in the 
DMA Configuration register was set to 1. See sections 4.2, 
4.3, and 4.4 for functional details on overrun conditions. 
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RESERVED 


This bit is read-only by the 795x and write-only by the host CPU. 
When this bit is set, it masks the setting of the done interrupt (for 
the Dest Ring). 


NOINVLD When this bit is set, the VALID bit is not set to 0 when the 
command is completed. 

INCR_32 When set, each descriptor is 32 bytes in length instead of 8 bytes. 

RESERVED 


Destination data endianness control. When this bit is set, the 
bytes within 32-bit Double Word fields will be transposed (see 
Section 1.3 for more information on endianness control). 





DEST _SWAP8 This control only applies to accesses on the PCI bus and doesn’t 
apply to Local Memory. Local Memory contents must be in little- 
endian format (use the LM_SWAP8 and LM_SWAP32 bits in the 
DMA Configuration Register #1 to ensure that data 

is in little-endian format). 
Destination data endianness control. When this bit is set, the two 
32-bit Double Word fields will be transposed (see Section 1.3 for 
more information on endianness control). 


DEST _SWAP32 This control only applies to accesses on the PCI bus and doesn’t 
apply to Local Memory. Local Memory contents must be in little- 
endian format (use the LM_SWAP8 and LM_SWAP32 bits in the 
DMA Configuration Register #1 to ensure that data 

i is in little-endian format). 

RESERVED 
This field can be read and written by the host CPU and by the 
795x. This field specifies the number of bytes in the destination 
buffer. The host initializes this value to the maximum size of the 

DESTINATION LENGTH buffer, and the 795x then overwrites the value with the actual 
returned byte count. For all valid, non-jump descriptors, this 
value must be non-zero. This value must be a multiple of four 
bytes, so bits 0 and 1 in this field must be 0. 

This field is read-only by the 795x and write-only by the host CPU. 

DESTINATION This field contains the address in memory of the beginning of a 

POINTER/JUMP POINTER | destination data block. This value must be a multiple of four 
bytes, so bits 0 and 1 in this field must be 0. 





After the completion of a command, the 795x automatically transfers the result block to the 
memory address specified in the result descriptor. The result indicates the success or failure 
of a processed command, as well as other information such as the source and destination 
byte counts. 
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2.4 Result Descriptors 
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INCR_32 
RESERVED 


RESERVED RESULT LENGTH 


RSLT_SWAP8 |~ 
RSLT_SWAP32|X 




















RESULT POINTER / JUMP POINTER 





The format of the result descriptor is shown above. This descriptor is used to point to a block 
(or blocks) of result data that is stored in system memory. Multiple result descriptors, which 
also reside in system memory, can be linked to form descriptor rings. This allows the 795x to 
transfer non-contiguous blocks of result data to system memory. The structure of the result 


descriptor is described below. 


Bit 0 is the least significant bit. RESERVED bits must be written with Os and ignored when 


read. 


[Field Description 


JUMP 
LAST 


This bit is set by the host CPU and reset by the 795x. The 795x 
polls the VALID bit of the next descriptor in each descriptor ring 
to determine when the descriptor is ready to be processed. 
Therefore, when the host software is preparing a descriptor, 
setting this bit to 1 must be the last operation performed. The 
795x clears this bit to 0 as the last operation in processing the 
descriptor. If the VALID bit is set, but the length is set to 0 (and 
the JUMP bit is not set), the 795x continues to poll until the 
length becomes non-zero. 

This bit is read-only by the 795x and write-only by the host CPU. 
If this bit is set to 1, the descriptor does not contain result 
information. Instead, it contains a pointer to the next descriptor 
in the descriptor ring. This can either link a separate linear 
section of the ring, or point the end of the ring to the beginning. 
Software must ensure that these pointers are valid before starting 
the 795x DMA engi 

This bit designates whether the current descriptor is the last 
descriptor of the Result buffer. This bit is set by either the host or 
the 795x based on the value of the LAST bit in the DMA 
Configuration register. Please see the description of the LAST 
bit in the DMA Configuration register for details on when this 
bit must or will be set. 


RESERVED en Sa re 


OVER 





This bit signifies that the 795x produced more results data than 
was allocated in the results descriptor (when the CPU is in control 
of the descriptor LAST flag). This bit is set under the same 
conditions that set the RESULT OVER bit of the Results Ring field 
(bit 17) in the DMA Status and Control register. This bit is 
only significant if the LAST bit (bit 4) in the DMA 
Configuration register is set to 1. See sections 4.2, 4.3, and 
4.4 for functional details on overrun conditions. 
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DEST OVER 


This bit signifies that the 795x produced more destination data 
than was allocated in the destination descriptor for this result. 
This bit is set under the same conditions that set the DEST OVER 
bit of the Destination Data Ring field (bit 25) in the DMA Status 
and Control register. This bit is only significant if the LAST bit 
(bit 4) in the DMA Configuration register was set to 1. See 
sections 4.2, 4.3, and 4.4 for functional details on overrun 
conditions. 

This bit is read-only by the 795x and write-only by the host CPU. 
When this bit is set, it will mask the setting of the done interrupt 
for the Result Ring 


NOINVLD When this bit is set, the VALID bit is not set to 0 when the 
command is completed. 

INCR_32 When set, each descriptor is 32 bytes in length instead of 8 bytes. 

RESERVED i Sa re aT 


RSLT_SWAP8 


RSLT_SWAP32 
RESULT LENGTH 


RESULT POINTER/JUMP 
POINTER 





Result data endianness control. When this bit is set, the bytes 
within the 32-bit Double Word fields will be transposed (see 
Section 1.3 for more information on endianness control). 


This control only applies to accesses on the PCI bus and doesn’t 
apply to Local Memory. Local Memory contents must be in little- 
endian format (use the LM_SWAP8 and LM_SWAP32 bits in the 
DMA Configuration Register #1 to ensure that data 

is in litthe-endian format). 
Result data endianness control. When this bit is set, the two 32- 
bit Double Word fields will be transposed (see Section 1.3 for 
more information on endianness control). 


This control only applies to accesses on the PCI bus and doesn’t 
apply to Local Memory. Local Memory contents must be in little- 
endian format (use the LM_SWAP8 and LM_SWAP32 bits in the 
DMA Configuration Register #1 to ensure that data 

is in little-endian format). 
This field can be read and written by the host CPU and by the 
795x. This field specifies the number of bytes in the result buffer. 
The host initializes this value to the maximum size of the buffer, 
then the 795x overwrites the value with the actual returned byte 
count. For all valid, non-jump descriptors, this value must be 
non-zero. This value must be a multiple of four bytes, so bits 0 
and 1 in this field must be 0. 
This field is read-only by the 795x and write-only by the host CPU. 
This field contains the address in memory of the beginning of a 
result block. This value must be a multiple of four bytes, so bits 0 
and 1 in this field must be 0. 
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3 Command, Context, and Data Structures 


RESERVED bits must be written as Os and ignored when read. Bits labeled "1" must be 
written as 1 and ignored when read. Bits labeled "0" must be written as 0 and ignored 
when read. 


3.1 Command Structures 


All commands (except the Read RAM and Write RAM commands) begin with the Base 


structure. This structure contains general information that relates to the overall command. 


Fields within this structure determine whether additional structures are required. 
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3.1.1 Base Command Structure 


Memory 
Order Vv 


Be 
BR 





COMMAND 


RESERVED 


DISABLE 
DEST FIFO 
ENCRYPT 
RESERVED 


























TOTAL 
SOURCE 
COUNT 
(D17- 
D16) 





TOTAL 
DEST 
COUNT 
(D17-D16) 


RESERVED SESSION NUMBER 











TOTAL SOURCE COUNT (D15-D0) 








TOTAL DESTINATION COUNT (D15-D0) 








Bit 0 is the least significant bit. RESERVED bits must be written with Os and ignored 
when read. 


[Field | Description, 


COMMAND 





The COMMAND field specifies the command to be executed by the 
enabled processing units. The table below lists the valid values for this 
field. All other values are reserved. 


Command Value 
Encode 0x000b 
Decode 0x001b 
Read RAM 0x010b 
Write RAM Ox011b 


Encode. This command encodes a block of data using the Context 
specified in the SESSION NUMBER field. This command affects the 
operation of all the processing units. For example, the encode command 
causes the compression packet engine to perform compression instead 
of decompression. 


Decode. This command decodes a block of data using the Context 
specified in the SESSION NUMBER field. This command affects the 
operation of all the processing units. For example, the decode command 
causes the compression packet engine to perform decompression instead 
of compression. 


Read RAM. This command is used to read data directly from the Local 
Memory. This command is typically used for debugging purposes or for 
memory testing. See the description for the definition of the special 
fields for this command. 


Write RAM. This command is used to write data directly to the Local 
Memory. This is typically used for debugging purposes or for memory 
testing. See the Write RAM Command Structure description for the 
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| | definition of the special fields for this command. 
If this bit is set to 0, the destination FIFO is enabled. After data passes 
through all the processing units, the data enters the destination FIFO for 
DMA transfer out of the chip. This is the normal setting. Setting this bit 
to 1 disables the destination FIFO. After data passes through all the 
processing units, the data is not sent to the destination FIFO; it is 
dropped. All processing units operate normally, but no output data is 
generated in the data phase. Context phase and result phase produce 
data normally. 


DISABLE DEST 
FIFO 


The Dest Counter is decremented even when the Dest FIFO is disabled. 
If this bit is set to 1, the compression packet engine is enabled. If this 
bit is set to 0, the compression packet engine is disabled. Data will pass 
through the compression packet engine unaltered. 

If this bit is set to 1, the pad packet engine is enabled. If this bit is set 
to 0, the pad packet engine is disabled. Data passes through the pad 
packet engine unaltered. 

If this bit is set to 1, the MAC packet engine is enabled. If this bit is set 
to 0, the MAC packet engine is disabled. Data passes through the MAC 
packet engine unaltered. 

If this bit is set to 1, the encryption packet engine is enabled. If this bit 
is set to 0, the encryption packet engine is disabled. Data passes 
through the encryption packet engine unaltered. 

If it is desired to force the first byte of destination data to a non-32-bit 
(or non-16-bit) alignment, the DEST ALIGN field may be used to 
produce a few bytes of data that is inserted in front of the destination 
data. The value of the inserted bytes is undefined. The number of 
bytes inserted is set in this field, and values 3 to O are valid. Dest 
Counter counts the inserted bytes. 

If this bit is set to 1, an unlimited amount of data may enter the 
Destination FIFO. The Total Dest Counter wraps from 0 to Ox3FFFF. If 
this bit is set to 0, the Destination FIFO stops accepting data from the 
processing units when the Total Dest Counter reaches 0. The processing 
units continue normally, but no data is produced. In either case, the 
Total Dest Counter is initialized to the value set in the TOTAL 
DESTINATION COUNT field. 

This field specifies the context used for encode and decode commands. 
The maximum number of sessions the 795x can support is determined 
by the amount of Local Memory, the compression algorithm used, and 
the compression mode set in the Packet Engine Configuration 
register. 


ENCRYPT 


DEST ALIGN 


IGNORE DEST 
COUNT 





SESSION NUMBER 


Single History Mode 
(CompDis = 1) 


Single History Mode 
(CompDis = 0) 


Multiple History Mode 





256 half-duplex 128B 
context (no ARC4) 


192 half-duplex 128B 
context (no ARC4) 


2 full-duplex sessions 
with stateful 
compression (ARC4 
supported) 





64 half-duplex 512B 
context (ARC4 
supported) 


48 half-duplex 512B 
context (ARC4 
supported) 








No compression 
support 





Stateless compression 
support 











If the COMP_CONFIG bit in the Packet Engine Configuration 
register is set to 0 (multiple compression contexts are to be used), then 


the SESSION NUMBER field is restricted to 1 bit (2 sessions). 


case bits 7:1 are reserved. If the COMP_CONFIG bit in the Packet 
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Engine Configuration register is set to 1 (only one compression 
context is to be used), then the SESSION NUMBER field comprises all 8 
bits. 
This is the initial value used for the Total Source Counter. The Total 
TOTAL SOURCE Source Counter is decremented for each data phase source byte 
COUNT processed by the processing units. Total Source Count decrements for 
every data phase byte processed. It will not decrement for any extra bytes 


resulting from non-word alignment in the last transfer. 
This is the initial value used for the Total Dest Counter. The Total Dest 
Counter is decremented for each data phase byte entering the 
TOTAL ae 
DESTINATION destination FIFO. Total Dest Count decrements for every data phase 
COUNT byte processed, including bytes specified by the DEST ALIGN field. It 
will not decrement for any extra bytes inserted due to non-word 
alignment in the last transfer. 





In order to reduce the number of bytes required for a complete Command structure, if the 
ENABLE bit of a packet engine is not set to 1 (as set by the first word of the Base 
structure), then the structure destined for that packet engine must not be present. For 
example, if only the encryption packet engine is enabled, then only two structures must be 
sent—the Base structure and the Encryption structure. 


If the Base Command Structure is the only structure sent (that is, all four processing 
engines are disabled), eight additional bytes must be appended to the end of the Base 
Command Structure. The value of these bytes is reserved (all Os). 


3.1.2 Read RAM Command Structure 


Memory 


Grier’ 15 14 13 12 11 





1 COMMAND RESERVED 








RESERVED 





RESERVED START ADDRESS (A13-A0) 








RESERVED TOTAL DESTINATION COUNT (D14-D0) 














If the COMMAND field contains the Read RAM command, then the Base command structure is 
formatted as described here. During a Read RAM command, the Read RAM Command Structure 
should be sent as the command data block. The source data block must consist of eight bytes of 
Os. Note that a source data block must be included in order for the Read RAM command to 
operate correctly. The destination data block consists of the contents in the Local Memory, and 
results are passed in the result block. 


Bit O is the least significant bit. RESERVED bits must be written with Os and ignored when read. 
Description 
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COMMAND The opcode for Read RAM is 2 (0b010). All other values are 
reserved. 


The TOTAL DESTINATION COUNT field determines the number 

of bytes to read. Since there is only 32KB of embedded memory, 

the value of the TOTAL DESTINATION COUNT and START 
LA acai ADDRESS fields must be selected to ensure the Local Memory 


address doesn’t exceed 32KB. Bit 0 in the TOTAL DESTINATION 
COUNT field must be set to 0. The minimum value of the TOTAL 
DESTINATION COUNT field is four. 


This field determines the starting address that is read from in the 
START ADDRESS Local Memory. This address is a 16-bit word address, not a byte 
address. 


3.1.3. Write RAM Command Structure 





Memory 


Order Vv 15 





COMMAND RESERVED 








RESERVED 





RESERVED TOTAL SOURCE COUNT (D14-D0) 








RESERVED START ADDRESS (A13-A0) 








If the COMMAND field contains the Write RAM command, then the Base command structure is 
formatted as described here. 


During a Write RAM Command, eight additional bytes must be appended to the end of the Write 
RAM Command Structure. The value of these bytes is reserved. The packet engine produces 8 
bytes of results, of which four bytes are transferred via the destination data phase and four via 
the results phase. The DMA unit must be programmed for four bytes of destination data and 
four bytes of results data. There is no destination data produced by the packet engine for this 
command. 


Bit 0 is the least significant bit. RESERVED bits must be written with Os and ignored when read. 
[Field Ci Description 
The TOTAL SOURCE COUNT field determines the number of bytes to 
write. Since there is only 32KB of embedded memory, the value of the 
TOTAL SOURCE TOTAL SOURCE COUNT and START ADDRESS fields must be 
COUNT selected to ensure the Local Memory address doesn’t exceed 32KB. Bit 
0 in the TOTAL SOURCE COUNT field must be set to 0. The minimum 
value of the TOTAL SOURCE COUNT field is four. 


This field determines the starting address that is written to in the Local 
2 VBR ADDRESS Memory. This address is a 16-bit word address, not a byte address. 
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3.1.4 Compression Command Structure 


Memory 


Order V a ~ 


12 11 #10 9 


N 
K 
He 








RESERVED RESERVED 


RESERVED (1)| ~ 
CLEAR HIST 
UPDATE 
HISTORY 
STRIP 0/ 
RESTART 
RESERVED 


























COMP HEADER COUNT (D15-D0) 





COMP SOURCE COUNT (D15-D0) 





4 





RESERVED 








If the COMP bit in the Base command structure is set to 1, then the Compression structure 
follows the Base command structure. 


Bit 0 is the least significant bit. RESERVED bits must be written with Os and ignored when 


read. 


[Field | Description 


CLEAR HISTORY 


UPDATE HISTORY 





If this bit is set to 1, the compression (or decompression) history 
specified by the SESSION NUMBER field is cleared before the 
operation begins. If this bit is set to 0, the compression (or 
decompression) history is not cleared. The operation uses history 
information from previous operations, which used the same context. 
This bit must be set to 1 for the first compress operation that uses the 
specified context after a hardware reset. Due to the nature of the LZS 
compression format, it is never necessary to clear a Decompression 
History. Also, it is not necessary to reset the MPPC decompression 
history unless specified in the MPPC protocol. 

This bit is significant for decompress operations only. If this bit is set to 
0, the decompression operation is processed normally. If this bit is set 
to 1, the decompress operation passes data through the compression 
packet engine unaltered, similar to the pass-through operation that 
occurs if the compression packet engine is disabled. However, the 
decompression history within the specified context is updated with the 
uncompressed source data. 
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STRIP 0/RESTART 


This bit has two functions depending on the compression algorithm 
selected. In LZS mode (the MPPC bit is set to 0), this bit is known as 
the STRIP O bit, and is used to enable the "Strip 0" mode of the LZS 
compression format. The STRIP O bit cannot be set if decompressing 
with the padding packet engine disabled. 


In MPPC mode (the MPPC bit is set to 1), this bit is known as the 
RESTART BIT, and is used to implement the “restart” function of the 
MPPC protocol. 


Enabling the Strip 0 feature may reduce the size of the compressed 
data stream by one byte. If this bit is set to 1 on a Compress 
operation, the last byte of compressed data is eliminated if the value of 
the last byte is 0. Based on the LZS format, this last byte is always 
part of the End Marker and is 0 approximately 88% of the time. If the 
last byte is eliminated, the Dest Counter does not count it. If padding is 
enabled, then Strip 0 should not be used. 


On a Decompress operation, a 0 is inserted in the source compressed 
data stream just before the check field, or at the end of the compressed 
data stream if there is no check field. The Source Counter does not 
count the inserted byte. 


If the Strip O mode is enabled during a Decompress operation, the 795x 
must know the exact number of source bytes so that it can insert the 0 

at correct location in the data stream. The pad length must contain the 
exact number of padding bytes. 


Many data communication standards define this feature as an option. 
However, this mode is incompatible with the ANSI X3.241-1994 
compression format standard. 


If the STRIP O bit is set to 0, this feature is disabled. 


In MPPC mode this bit is used to signal the decompression engine to 
move the data to the front of the compression history, as specified in 
the MPPC protocol. If this bit is set to 1 the packet is moved to the 
front of the compression history. If this bit is set to 0 the packet is not 
moved to the front of the compression history. 


During a compression operation, the packet engine automatically moves 
the data to the beginning of the history buffer as required, so the 
RESTART bit must be set to 0. 

This bit selects the compression algorithm used. If this bit is set to 0, 
the LZS algorithm is used. If this bit is set to 1, the MPPC algorithm is 
used. 

Once a compression (or decompression) history within a context is 
cleared (with the CLEAR HIST bit), the selected compression algorithm 
must remain constant whenever that context is used again until the 
compression history is cleared. 


This bit also affects the memory map of the Local Memory as described 
in Section 5. 


For stateful compression, each LZS or MPPC full duplex session context 
requires 16 Kbytes of Local Memory. Although an individual encoding 
session context is functionally independent of a decoding session 
context, the associated memory areas are allocated together in a single 
16 Kbyte memory block. See the table below. 
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COMP HEADER 
COUNT 


COMP SOURCE 
COUNT 


Session Type SESSION Actual Local 

NUMBER Field Memory 
Value Location 

1st Encoding Session 0 

Context 

1° Decoding Session 0 

Context 

2™ Encoding Session 1 

Context 

2™ Decoding Session 1 

Context 


For stateless compression, only 8Kbytes total is used between all 
sessions. 

This field sets the number of bytes that the compression packet engine 
will let pass through before it begins processing the incoming data 
stream. 

After the header bytes have been passed through (as specified by the 
COMP HEADER COUNT field), the packet engine processes the data in 
the data stream. The packet engine stops processing data and returns 
to pass-through mode after the Comp Source Counter reaches 0. The 
Comp Source Counter begins to decrement after the Comp Header 
Counter has expired. 


During a compression operation, when the Comp Source Counter 
reaches O, or after the last byte (as defined by the Total Source Count) 
has been processed, the compression packet engine flushes out its 
internal data. If in LZS mode, an End Marker is appended to the 
compressed data stream. 


During a decompression operation, in LZS mode, if the End Marker is 
found before the Comp Source Counter reaches 0, all the source data 
between the End Marker and the last source byte is discarded. If the 
End Marker is present in the last source byte, then no data is discarded. 
If there is no End Marker in the source data, the Decompression History 
may become invalid. 


In MPPC mode, the maximum Comp Source Counter value is 8192. 
Also, the last source byte must be the last byte produced by the original 
compression operation. Otherwise, the Decompression History becomes 
invalid. 


If the compression packet engine is enabled, it must process at least 
one byte. The TOTAL SOURCE COUNT field in the Base Command 
Structure, as well as the COMP HEADER COUNT and COMP SOURCE 
COUNT fields in the Compression Command Structure, control the 
number of bytes processed by the compression processing unit. 
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3.1.5 Pad Command Structure 


Memory 


Order V ia ai 


me 
WwW 
N 





PAD 
SOURCE 
COUNT 
(D17-D16) 


PAD LENGTH RESERVED 


PAD COUNT 
MODE 
RESERVED 
PAD MOD 
LENGTH 




















PAD 
ALGORITHM 








PAD SOURCE COUNT (D15-D0) 





If the PAD field in the Base Command structure is set to 1, then the Pad structure follows the 
Compression structure. 


If the padding engine is the only engine enabled, four additional bytes of zero must be appended 
to the end of the Pad Command Structure. 


When the Pad packet engine completes an encode operation, the specified pad is inserted into 
the data stream. When the Pad packet engine completes a decode operation, the pad is 
removed from the data stream. 


Bit 0 is the least significant bit. RESERVED bits must be written with 0’s and ignored when 


read. 


[Field | Description 


PAD COUNT 
MODE 


PAD LENGTH 





This bit is valid only for an encode operation. 


If this bit is set to 0, the Pad Source Counter begins to decrement after the 
last header byte has been passed through (as set by the PAD HEADER 
COUNT field). 


If this bit is set to 1, the Pad Source Counter begins to decrement after the 
last byte processed by the previous packet engine (compression or MAC), 
as determined by the source counter of the previous processing unit. 


The PAD HEADER COUNT field starting value is taken from the ENCRYPT 
HEADER COUNT field in the Encryption Command Structure. 
This field operates differently for encoding than for decoding. 


While encoding, this field is used to specify a count that the padding 
packet engine should add to the number of bytes processed by the 
padding unit to determine the correct number of padding bytes to insert. 
Generally, this encompasses bytes that follow the padding field in the 
packet format. Values zero through fifteen (0-15) are valid in AES mode 
and values zero through seven (0-7) are valid for all other modes. 


While decoding, this field is the number of bytes that the padding packet 
engine should strip off. The padding packet engine cannot automatically 
determine this value during a decode operation. Values zero through 
sixteen (0-16) are valid in AES mode and values zero through eight (0-8) 
are valid for all other modes. 


During a decode operation, if LZS compression is used and padding 
appears immediately after the compressed data, the padding packet 
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PAD MOD 
LENGTH 


1 


PAD ALGORITHM 
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engine should be disabled, and the COMP SOURCE COUNT field set to 
strip off any extra padding. 


If MPPC compression is used, or no compression is used, then the PAD 
LENGTH field must be set to the number of padding bytes that must be 
stripped. 

This field is RESERVED for all modes except AES CTR mode. 


For ARC4, DES, and 3DES, padding will always be to 8 bytes. 


AES modes -- When encrypting using AES CTR mode, if this bit is set to 1, 
then the padding will be MOD-4 and if this bit is set to 0, then the padding 
will be MOD-16. For all other AES modes, padding will always be to 16- 
bytes. 

This field sets the algorithm used by the padding processing unit. For the 
AES algorithm, the data is padded out to modulo 16 bytes. For all other 
algorithms, the data is padded out to modulo 8 bytes. 


This field is only significant for an encode operation. During a decode 
operation this field is ignored. 


AES Mode - Pad Algorithms 


Insertion Range 
Value (Bytes) 
00 1-16 
O1 1-16 
10 0-15 
11 1-16 


all other modes - pad algorithms 


Value Algorithm 
00 Mode 0 
01 Mode 1 
10 Mode 2 
11 Mode 3 


Mode 0 - the Padding packet engine inserts one to eight bytes, with at 
least one byte being inserted. The value of all bytes is the number of 
bytes inserted, less one. 


Example: If three bytes are required to pad out to modulo 8, three bytes 
will be inserted, each with a value of two. 


Mode 1 - The Padding packet engine inserts one to eight bytes. The byte 
values are an incrementing byte value, starting with the value 1. 


Mode 2 - The Padding packet engine inserts zero to seven bytes. The 
bytes are all the same value. The value is the number of bytes inserted. 
Zero bytes may be inserted. 


Mode 3 - The Padding packet engine inserts two fields. The first field is 
zero to seven bytes. The byte values are an incrementing byte value, 
starting with the value 1. The second field is exactly one byte. The value 
is the number of bytes inserted in the first field. 





34 


oe LD el | 


PAD HEADER 
COUNT 


PAD SOURCE 
COUNT 


This field does not exist in the Pad Command Structure. The value of the 
Pad Header Count is the same as the value set in the Encrypt Header 
Count in the Encryption Command Structure. If the Encryption packet 
engine is disabled, then the value of Pad Header Count is 0. 


This value sets the number of bytes that the padding packet engine lets 
pass through before it begins processing the incoming data stream. 

The Padding packet engine processes data after the Pad Header Count 
reaches O, until the Pad Source Count reaches 0. When the Pad Source 
Counter reaches 0, or after the last byte (as defined by the Total Source 
Count) has been processed, the padding packet engine stops. 


The Pad Source Counter begins to decrement after the Pad Header Counter 
has expired, or after the last byte processed by the previous processing 
unit, as set by the PAD COUNT MODE bit. 


After the Pad Source Counter expires, all data that follows (as defined by 
the Total Source Count) is passed through. 
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3.1.6 MAC Command Structure 


Memory 


Order Vv 15 at 


wW 
rae 
N 
b 
pare 
me 
oO 
N 





MAC 
SOURCE 
COUNT 
(D17-D16) 
MAC COUNT 
MODE 
KEY 
SELECT 
RESERVED 
MAC 
POSITION 
RESERVED 
INSERT MAC | o 
MAC RESULT] 
TRUNCATE 
MAC 
MAC MODE 
MAC 
ALGORTHM 



































MAC HEADER COUNT (D15-D0) 
MAC SOURCE COUNT (D15-D0) 








RESERVED MUTE TABLE 


If the MAC field in the Base command structure is set to 1, then the MAC structure follows the 
Pad structure. When the MAC packet engine completes an encode operation, the calculated 
MAC is inserted into the data stream (as determined by the INSERT MAC and MAC RESULT 
bits). When the MAC packet engine completes a decode operation, the calculated MAC is 
compared to the MAC in the data stream. 








Bit-0O is the least significant bit. RESERVED bits must be written with Os and ignored when 
read. 


[Field S| Description 


This bit is valid only for a encode operation. If this bit is set to 0, the 

MAC Source Counter begins to decrement after the last header byte has 
MAC COUNT been passed through (as set by the MAC HEADER COUNT field). If this 
MODE bit is set to 1, the MAC Source Counter begins to decrement after the last 


byte processed by the previous packet engine (compression, padding, or 
encryption) as determined by the source counter of the previous 
processing unit. 


These bits select the source of the MAC key. Their definition is as follows: 
Key Select Value Description 
00 Key is in Local Memory (or no key necessary) 
O01 New key is supplied in the source FIFO 
context phase 
Reserved 
REY SEECT Pre-processed key supplied in the source 
FIFO context phase 
These bits must be set to 00 if the MAC MODE field is set to hash only 
(00) since no key is required. Refer to the Source Context Structures 
section for more information on sending new and pre-processed keys in 
the source FIFO context phase. 
This field selects the logical position of the MAC packet engine in 
relationship to the other processing units. The valid values are shown in 
the table below. 
MAC POSITION MAC Position Value MAC Relative Location 
00 Between compression and padding 
01 Between padding and encryption 
10 After encryption (or before decryption for 
decode) 
iil Reserved 
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This bit selects if the MAC is inserted into the data stream. If this bit is 
set to 0, the MAC is not inserted into the data stream after it is calculated. 
If this bit is set to 1 on an encode operation, the MAC is inserted into the 
data stream after it is calculated. If set to 1 on a decode operation, the 
INSERT MAC MAC is stripped from the data stream (after it is calculated), and the 
stripped MAC is compared to the calculated MAC. A miscompare is 
indicated by the MAC MISCOMPARE bit in the Result Phase. 
See Table 3 for a summary of the relationship between this bit and other 
bits in the MAC Command Structure. 


This bit selects if the MAC is inserted into the MAC Result Structure. If 
this bit is set to 0, the MAC is not inserted into the MAC Result Structure 
MAC RESULT after it is calculated. If this bit is set to 1, the calculated MAC is inserted 
into the MAC Result Structure after it is calculated. Table 3 provides a 
summary of the relationship between this bit and other bits in the MAC 


Command Structure. 


This bit selects if the MAC is truncated to 12 bytes. If this bit is set to 0, 
the MAC is composed of the full, calculated MAC. The MAC is 20 bytes for 
THOSE aS SHA, or 16 bytes for MD5. If this bit is set to 1, the MAC is truncated to 


12 bytes. The most signifi ing bytes) are truncated. 


This field selects the MAC mode as defined in the table below. 
Value Mode 
00 HMAC 
MAC MODE SSL MAG 
Hash only 
Reserved 
The SSL MAC Mode is valid only if the MD5 MAC algorithm is selected. 
The SHA algorithm may not be used in SSL MAC Mode. 


This field selects the MAC hash algorithm as defined in the table below. 
Value Algorithm 
MAC ALGORITHM 00 SHA 
O01 MD5 
10 Reserved 
11 Reserved 


MAC HEADER This field sets the number of bytes that the MAC packet engine will let 
COUNT pass through before it begins processing the incoming data stream. 


The MAC packet engine processes data after the MAC Header Count 
reaches 0. When the MAC Source Counter reaches 0, or after the last 
byte (as defined by the Total Source Count) has been processed, the MAC 

MAC SOURCE packet engine stops. The MAC Source Counter decrements after the MAC 

COUNT Header Counter has expired, or after the last byte processed by the 
previous processing unit, as set by the MAC COUNT MODE bit. After the 
MAC Source Counter expires, all data that follows (as defined by the Total 
Source Count) is passed through. 


MUTE TABLE This field selects the mute table to be used on the first 16 bytes of the 
data stream processed by the MAC engine. Depending on the count 
mode, the data stream begins either after the last byte processed by the 
previous engine (MAC COUNT MODE = 1) or after MAC HEADER 
COUNT has decremented to zero (MAC COUNT MODE = 0). Setting 
MUTE TABLE = 0 disables MAC muting. Values 0-8 are valid settings 
and 9-15 are reserved. See Section 6.6 for more information on the Mute 
Table registers. 
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Table 3 MAC Operation 


Encode/ Insert | MAC Behavior 
Decode MAC Result 
lEncode |0 [0 | MACis calculated, but not used. 


fEncode |O [1 [| MAC is calculated and inserted into MAC Result Structure. 
1Encode |i =[0 | MAC is calculated and inserted into data stream. 


Encode 1 1 MAC is calculated and inserted into both the data stream and 
the MAC Result Structure. 


[Decode [0 |0 ‘| MACis calculated, but not compared to MAC in data stream. _| 
ll Feet 
Calculated MAC is inserted into MAC Result Structure. 
[Decode [1 = |0 _—| MAC is calculated and compared with MAC in data stream. 
Calculated MAC is also inserted into MAC Result Structure. 
The processing units are arranged in-line with the data path. The ordering of the processing 


units is determined by the type of operation (encoding or decoding) and the value of the 
MAC POSITION field in the MAC structure (if present). A summary is shown below. 





Table 4 Packet Engine Ordering 


| Operation | MAC Position | 1" [| 2" [| 3" | 4" 
| After Comp __| Comp _| MAC___| Pad__| Encrypt | 
Encode | AfterPad | Comp | Pad | MAC__| Encrypt | 
[After Encrypt | Comp | Pad ___| Encrypt | MAC __| 


| Before Pad __| Decrypt | MAC__| Pad__| Decomp | 


ocede [etre as beet | vac [Poa —[Oecon 
Decode 
| Before Decrypt [MAC | Decrypt | Pad___[ Decomp | 
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3.1.7. Encryption Command Structure 


Memory 
Order Vv 


jo) 


15 14 


i 
eS 


10 





ENCRYPT 
SOURCE 
COUNT 
(D17-D16) 


AES 
KEY 
LENGTH 


ENCRYPT 
MODE 


ENCRYPT 
COUNT 
MODE 
NEW KEY 
RESERVED 
CLR ENCR 
CONTEXT 
RESERVED | ~ 
ENCRYPT 
ALGORITHM 
































ENCRYPT HEADER COUNT (D15-D0) 





ENCRYPT SOURCE COUNT (D15-D0) 





RESERVED 








If the ENCRYPT field in the Base structure is set to 1, then the Encryption structure follows the 
MAC structure. 


Bit 0 is the least significant bit. RESERVED bits must be written with Os and ignored when 
read. 


[Field | Description 


This bit is valid only for an encode operation. If this bit is set to 0, the 
Encrypt Source Counter begins to decrement after the last header byte 
has been passed through (as set by the ENCRYPTION HEADER 
COUNT field). If this bit is set to 1, the Encrypt Source Counter begins 
to decrement after the last byte processed by the previous packet 
engine (compression, padding, or MAC) as determined by the source 
counter of the previous processing unit. 

This bit is only significant for the DES and Triple-DES algorithms in CBC 
mode and also for AES Counter and CBC modes. This bit selects if a 
new crypto Initialization Vector (IV) is to be supplied. Many 
parameters affect whether an IV needs to be supplied. See Section 
3.1.11 for details. If a new IV is supplied, it must appear in the Source 
FIFO context phase. This bit must be 0 if the ENCRYPT ALGORITHM 
field is set to ARC4 (10) or if the ENCRYPT MODE field is set to ECB 
(00). 


ENCRYPT COUNT 
MODE 


If this bit is set to 0, the last 8 bytes of cipher text from the previous 
block in the same session utilizing the same command is used as the 
IV for DES and Triple-DES. For AES, it is the last 16 bytes. 


In AES Counter mode, the NEW IV bit equals NEW COUNTER VALUE. 
In AES CBC mode, the NEW IV bit equals NEW CRYPTO IV. 


This bit selects if a new Encryption key is to be supplied. If a new key 
NEW KEY is supplied, it must appear in the Source FIFO context phase. The key 
is a representation of the binary key as defined in Section 3.1.11. 
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This field is only significant if the AES algorithm is selected in the 
ENCRYPT ALGORITHM field. In AES Counter mode, AES will always 
be in Encode mode. This field selects the mode of the algorithm as 
defined in the table below. 


AES KEY LENGTH Value Keylength 
00 128 bit 
O01 192 bit 
10 256 bit 
11 Reserved 


If this bit is set to 0, the encryption context is saved normally. If this 
bit is set to 1, the encryption context is not saved to Local Memory. 
This may improve speed performance if it is known in advance that the 
CLEAR ENCRYPT context will not be used in the future. When this bit is set, the 
CONTEXT encryption context residing in the Local Memory remains valid. That is, 
if this bit is set for a command, not only will the encryption context for 
the current command not be written to Local Memory, but the 
encryption context from the previous command (with the same session 
number) will remain valid. 
This field selects the mode of the algorithm as defined in the table 
below and applies to all algorithms except ARC4. 


Value Mode Description 
000 ECB ECB 
001 CBC CBC 


010 Reserved 
ENCRYPT MODE 011 Reena 


100 AES-CTR This field is only significant if the AES 
algorithm is selected in the ENCRYPT 
ALGORITHM field. This field selects the 
Counter mode for the AES algorithm. 


101:11 Reserved 
al 


This field selects the encryption algorithm as defined in the table 
below. 


Value Algorithm 
00. DES 
O01 Triple DES 
ENCRYPT - fo 
ALGORITHM 


For AES-CTR mode, the source data must be padded to mod-4 bytes 
and mod-16 bytes for all other AES modes. 


For DES or Triple-DES, the source data for the encryption packet 
engine must be padded to mod-8 bytes. This is usually accomplished 
by enabling the padding processing unit. 

ENCRYPTION This field sets the number of bytes that the encryption packet engine 


HEADER COUNT will let pass through before it begins processing the incoming data 
stream. 
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The Encryption packet engine processes data after the ENCRYPTION 
HEADER COUNT reaches 0, until the ENCRYPTION SOURCE COUNT 
reaches 0. When the ENCRYPTION SOURCE COUNTER reaches 0, or 
after the last byte (as defined by the TOTAL SOURCE COUNT) has 
ENCRYPTION been processed, the Encryption packet engine stops. The 


ENCRYPTION SOURCE COUNTER begins to decrement after the 
ENCRYPTION HEADER COUNTER has expired, or after the last byte 
processed by the previous processing unit, as set by the ENCRYPTION 
COUNT MODE bit. After the ENCRYPTION SOURCE COUNTER 
expires, all data that follows (as defined by the TOTAL SOURCE 

is passed through. 


SOURCE COUNT 





All commands produce result information when they are completed. The result information 
appears in the Destination FIFO as a result structure during the result phase. 


3.1.8 Command Termination Conditions 


All commands terminate normally when the Total Source Counter reaches 0. A “normal 
termination” means that the command completes its operation and the result information is 
properly appended to the output data stream. 


A “fatal termination” means that all operations immediately stop and the processing units 
are cleared. No result information is generated. The only way to recover from a fatal 
termination is to reset the 795x with a software or hardware reset. 


See the INVALID COMMAND field in the Packet Engine Status register for a description 
of the conditions that can cause a fatal termination. 


3.1.9 Source Context Structures 


MAC and encryption information is transferred to the 795x in the Source Context phase. 
This information (if required by the device) consists of a MAC key, and encryption key, or an 
encryption IV. 


Source context is transferred to the 795x in the following order: MAC key, encryption key, 
and then encryption IV. 


3.1.10 MAC Source Context Structure 


MAC source context must be supplied when the KEY SELECT bits of the MAC Command 
structure are set to anything but 00. 


When KEY SELECT specifies a new key, this key must be supplied as a string of 64 data 
bytes, formatted as follows: 


Ko, Ki, aay Kn-1, Oo, 01, voy O64-(n-1) 


Where K is the key, Kg is the least significant byte of the key, and n is the length of the 
key in bytes. Qo represent the zero value used in padding the key. 
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When KEY SELECT specifies that a pre-processed key is to be provided, a 40 byte 
hashed version of the key must be supplied. Key hashing takes place whenever a new 
key is supplied, and takes approximately 300 clock cycles internally to calculate. As 
such, there is a performance improvement by either storing the hashed MAC key in the 
Local Memory, or supplying it with the source context structure whenever the key 
doesn't change. After a new key has been hashed and stored within the Local Memory, 
a Read RAM command can be issued to retrieve this pre-processed key. The pre- 
processed key in the Local Memory will remain unchanged until another packet arrives 
specifying a new MAC key for the same session number. Thus one internal session 
number can be shared between multiple external sessions provided the context is 
stored externally. 


3.1.11. Encryption Source Context Structure 


Encryption Source Context, which consists of an encryption key and/or IV, must be provided 
when expected by the 795x. The device expects an encryption key if the NEW KEY bit in 
the Encryption Command Structure is set, and it expects a new IV or Counter value if the 
NEW IV bit is set. 


New key information must be provided as a formatted string. Each encryption algorithm 
requires a unique format as described below. 


3.1.12 DES 


DES Keys 


The DES key is made up of 8 octets (64 bits) of data, of which 56 bits are key material and 
8 are parity bits (one per octet). The DES key is transferred to the 795x in network byte 
order as shown in Figure 2. 


First 1 2 3 4 


) 6 7 
vo TPA aerate anise ape 
P| P P P P P| P 


Note: P=Parity bit 


Last 
Byte 


Isb 


8 
<+—_—_> 
5 
7 

P 








Figure 2 DES Key Format 


Triple-DES Keys 


The Triple-DES key is made up of 24 octets (192 bits) of data, of which 168 bits are key 
material and 24 are parity bits (one per octet). The Triple-DES key is transferred to the 
795x in network byte order as shown in Figure 3. 
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191... 128127 .. 64 63... 0 
Key# 3 Key# 2 Key# 1 
First Key Last Key 


Figure 3 Triple DES Key Format 


DES Initialization Vector 


The IV is a string of 8 bytes, which are transferred to the 795x in network byte order. Both 
DES-CBC and Triple-DES-CBC support this 8 byte IV. DES-ECB or Triple-DES-ECB mode do 
not require IV. 


3.1.13 ARC4 


The key is a string of 260 bytes. The last four bytes must be 0. If the desired ARC4 key is 
less than 256 bytes, the key must be repeated as required to complete 256 bytes, then 
appended with four Os. The least significant byte is first. This may be represented as 
follows: 


Kee Kip ene Rete Koei Kec 6, 6.0 


Note 
The last copy of the repeated key may be incomplete in order to satisfy exactly 256 
bytes. 


ARC4 does not use an IV. 


3.1.14 AES 


AES Keys 


The 795x supports 3 key sizes for AES crypto operations. The key sizes supported are 128, 
192, and 256 bits in length and are stored in network byte order. 


AES Initialization Vector 


In CBC or Counter modes, the IV is a string of 16 bytes that conforms to RFC2451 for CBC 
and draft-ietf-ipsec-ciph-aes-ctr-01.txt for AES-CTR, which are transferred to the 795x in 
network byte order. The IV length is independent of the AES key size and is fixed at 128 
bits. 16 bytes should be passed by the host, and the format of the 16 bytes should conform 
to RFC2451 for CBC and draft-ietf-ipsec-ciph-aes-ctr-01.txt for AES-CTR. 


3.2 Result Structures 


All results begin with a Base Result structure. Fields within this structure determine 
whether additional structures will follow the Base Result. The Base structure contains 
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general information that relates to the overall result. Most of this information is related to 
the session number, source byte count, and destination byte count. 


3.2.1. Base Result Structure 


Memory 
Order Vv 





RESERVED RESERVED 


DEST 
OVERRUN 











TOTAL 
DEST 
COUNT 
(D17-D16) 


RESERVED SESSION NUMBER 














TOTAL SOURCE COUNT (D15-D0) 





TOTAL DESTINATION COUNT (D15-D0) 











The Result phase always begins with this structure for all commands. The options of the 
command executed determine whether additional structures are produced. The smallest result 
contains at least the four words of the Base Result structure. The Base Result structure 
contains general information that relates to the overall command. Most of this information is 
related to the Source FIFO and the Destination FIFO. In order to reduce the number of bytes 
required for a complete Result structure, if the enable bit of a packet engine was not set to 1 
(as set by the first word of the Base Command structure), then a structure from that packet 
engine is not presented. For example, if only the Encryption packet engine was enabled, then 
only two structures are produced—the Base Result structure and the Encryption Result 
structure. 


Bit 0 is the least significant bit. RESERVED bits must be written with Os and ignored when 
read. 


[Field | Description 


This bit is set when the command produced more data than specified 
DEST OVERRUN in the TOTAL DESTINATION COUNT field of the Base Command 
Structure, and the IGNORE DEST COUNT bit was set to 0. 


This field contains the original value of the SESSION NUMBER field of 
the corresponding Base Command structure. This value may be used 
SESSION NUMBER to help verify synchronization between commands and results. The 
SESSION NUMBER is undefined for a Read RAM or Write RAM 
command. 
This is the final value of the Total Source Counter at command 
termination. The Total Source Counter is decremented for each source 
a byte taken from the Source FIFO, and should be zero if the command 
terminated cleanly. The TOTAL SOURCE COUNT is undefined for a Read 
RAM. 
This is the final value of the Total Dest Counter at command 
termination. The Total Dest counter is decremented for each byte that 
TOTAL DEST COUNT enters the Destination FIFO. The TOTAL DEST COUNT is undefined for a 
Write RAM. 
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3.2.2 Compression Result Structure 


[o) 





RESERVED 


SOURCE 
NOT ZERO 





RESTART 
DCMP 
SUCCESS 




















If the Compression packet engine is enabled, this data structure is appended to the Base Result 


Structure. 


Bit 0 is the least significant bit. RESERVED bits must be written with Os and ignored when read. 


[Field 


RESTART 
DCMP SUCCESS 


SOURCE NOT ZERO 





This field is valid only if the compression packet engine was the only 
packet engine engaged. If any of the other engines were used in the 
command, then this field is reserved. This field represents the 8-bit 
LCB (longitudinal Check Byte) for the command. The LCB is a byte-wise 
exclusive-OR sum of the uncompressed data. The LCB is initialized to 
FF,., before each compress or decompress operation. 

This bit is significant for the MPPC algorithm only. This bit is used to 
indicate that the compression engine moved the data to the front of the 
compression context, as specified in the MPPC protocol. If this bit is set 
to 1 the data was moved to the front of the compression context. If 
this bit is set to 0 the data was not moved to the front of the 
compression context. 

For LZS, this bit indicates that no errors were detected in the 
decompression operation and that a valid end marker was detected. 

For MPPC, this bit indicates that no errors were detected in the 
decompression operation. 


This bit is undefined if the UPDATE HISTORY bit in the Compression 
Command Structure is set. 

If this bit is set to 1, the compression packet engine stopped processing 
a block of data before the Comp Source Count reached 0. This may be 
caused by improper setting of the Comp Source Count relative to the 
Total Source Count. 

This field is valid only if the compression packet engine was the only 
packet engine engaged. If any of the other engines were used in the 
command, then this field is reserved. This field represents the CRC 
value for the command. The CRC is initialized to "FFFF16" before each 
compress or decompress operation, and is performed on the 
uncompressed data. The CRC polynomial is x16+x!24+x°+1. 
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3.2.3 MAC Result Structure 


Memory 
Order 15 14 13 
NY 


12 11 10 





RESERVED 


MIS- 
COMPARE 
SOURCE 
NOT ZERO 











RESERVED 








MAC (N 16-BIT WORDS, N=0, 6, 8, OR 10) 


If the MAC packet engine is enabled, this data structure is appended to the previous Result 
Structure (Base or Compression). 


Bit O is the least significant bit. RESERVED bits must be written with Os and ignored when read. 


MISCOMPARE 


SOURCE NOT ZERO 
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Description 

During a decode operation, if the MAC packet engine detects a MAC 
miscompare, this bit is set to 1. 

If there is no miscompare, this bit is set to 0. 

If this bit is set to 1, the MAC packet engine stopped processing a 
block of data before the MAC Source Count reached 0. This may be 
caused by improper setting of the MAC Source Count relative to the 
Total Source Count. 

This is the result of the MAC processing unit. The number of bytes 
produced is determined by the MAC algorithm selected and the value 
of the TRUNCATE MAC bit in the MAC Command Structure. No 
MAC is presented unless the MAC RESULT bit in the MAC Command 
Structure is set to one. 
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3.2.4 Encrypt Result Structure 


Memory 
Order 15 14 13 12 11 10 
NY 





RESERVED 


SOURCE 
NOT ZERO 








RESERVED 








If the Encryption packet engine is enabled, this data structure is appended to the end of the 
previous Result Structure (Base, Compression, or MAC). 


Bit O is the least significant bit. RESERVED bits must be written with Os and ignored when 
read. 


[Field SC Description 
If this bit is set to 1, the Encryption packet engine stopped 
processing a block of data before the ENCRYPTION SOURCE 
SOURCE NOT ZERO COUNT reached 0. This may be caused by improper setting of the 
ENCRYPTION SOURCE COUNT relative to the TOTAL SOURCE 
COUNT. 
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4 Data Processing 


The 795x has four processing units: Compression, Padding, Encryption, and MAC. The order 
of processing is determined by whether the operation is an encode or a decode. Each 
processing unit may be enabled or disabled. A disabled processing unit simply passes data 
forward to the next processing unit without altering the data or modifying the context. In 
addition, the location of the authentication (MAC) processing unit may be programmed to 
support processing various protocols. 


Each processing unit has two counters: the Header Counter and the Source Counter. The 
Header Counter determines how many bytes the packet engine passes through (starting 
with the first byte of source data) before it begins processing the data. This counter is 
useful to skip header fields in many communication protocols. 


The Source Counter determines how many bytes to process by that processing unit. The 
Source Counter may be programmed to start counting from the first byte to be processed 
(after skipping the header bytes), or it may be programmed to start counting after the last 
byte processed by the previous processing unit (as defined by the previous processing unit’s 
source counter). This flexibility takes into account the variable output size produced by the 
compression and padding processing units. Once the source count of a processing unit 
reaches zero, any remaining bytes in the input data stream are passed through the 
processing unit without altering the data or modifying the context. 


There is also a Total Source Counter that is initialized from the Base Command Structure 
and determines when a command is completed. Once the Total Source Counter exhausts its 
count, the command completes, and the next command begins to be processed. 


4.1 Example Data Block 


The 795x SentryXL processes blocks of data. The command associated with this block of 
data controls each processing unit by specifying what part of the block each unit must work 
on. 


Through careful selection of the Header Count and Source Count values in each processing 
unit, relatively complex patterns of compression, encryption, and authentication may be 
performed. 


The following simple example demonstrates how the 795x processes a block of data. 
Consider an encode operation being performed on the block of data shown in Figure 4. 
Although the location of the MAC processing unit is programmable, in this example the 
ordering of the processing units will be compression, padding, encryption, and MAC. 
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A B Cc 


li¢—— Compression 

Padding 
Encryption 
|). Ath entication 









Figure 4 Example Data Block 


Note 
A, B, C, and D represent the number of bytes from the beginning of the source block 


The header, payload, and trailer are the parts of this block of data that enters the 795x (the 
padding and MAC are added to the data by the 795x). As such, the total source count value 
is Li eae 


A 
B-A 
ee: 
A 
1 
C-B 
A 
1 
|Header Count | 
[Source Count | 


Figure 5 Command Length Usage 





Note 
Pad Header Count is taken from the Encryption Command Structure. 


Since the header of this data block is not to be compressed, the compression processing 
unit must skip over this header. The Header Count, “A”, represents the number of bytes of 
data the compression processing unit pass through with out compressing. Once the Header 
Count is passed through, the compression processing unit compresses Source Count bytes, 
“B-A”. Note that “B” represents the number of bytes (passed in the command) that the 
compression processing unit processes. The value “B” returned in the results represents the 
number of compressed bytes. 


The padding, encryption, and MAC processing units work in a similar fashion. The 
processing units pass through the number of bytes in the Header Count, then process 
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Source Count bytes of data. Since the Count Mode is set to "1", these engines begin to 
process data after the last byte exits the compression processing unit. 


4.2 Destination Data Overrun 


There are two types of destination overruns: processing unit-based overruns and descriptor- 
based overruns. The 795x may be configured to respond to either or both types of 
destination overruns. Typically, the detection of only one type of destination overrun is 
enabled. However, the detection of both types of destination overruns may be enabled if 
desired. 


4.2.1. Processing Unit-Based Destination Overrun 


A processing unit-based destination overrun condition occurs when the command produced 
more data than specified in the TOTAL DESTINATION COUNT field of the Base Command 
Structure, and the IGNORE DEST COUNT bit was set to zero. If the Destination Counter 
attempts to decrement below zero, the command continues to process incoming data, but 
no additional data is output to the Destination FIFO. This does not cause the command to 
terminate, and the Destination Counter remains at zero. After all source data in the 
command is processed, results are produced as normal. 


When a destination overrun condition occurs, the DEST OVERRUN bit in the Packet 
Engine Interrupt Status register is set. Additionally, the DEST OVERRUN bit in the Base 
Result Structure is set when the results are produced. 


Bit 9 in the Packet Engine Interrupt Enable register is defined as DEST OVERRUN 
interrupt enable. This bit may be used to generate error detection when a destination 
overrun occurs. To utilize this, the ENGINE IRQ bit in the DMA Interrupt Enable register 
must also be set to enable packet engine interrupts. 


The DEST OVERRUN bit in the Packet Engine Interrupt Status register remains set until 
cleared. Clearing bits in the Packet Engine Interrupt Status and DMA Status and 
Control registers is described in the corresponding register descriptions in this specification. 


Furthermore, the destination overrun condition prevents the current encryption and MAC 
context from being saved in the Local Memory. Compression context is always saved in 
Local Memory. This effect on packet processing is described in the following section. 


4.2.2 Processing Unit-Based Destination Overrun Effect On 
Same Sessions 


Only the ARC4 key, the DES Initialization Vector (IV), and the AES CBC mode IV change 
while data is processed. The other encryption and MAC keys remain constant during 
processing. Upon completion of a command (that does not cause a destination overrun), 
the internal ARC4 key, DES IV, or AES CBC IV is written to the Local Memory, as well as 
being stored in the encryption processing unit. 


When a command causes a destination overrun to occur, the internal ARC4 key, DES IV, or 
AES CBC IV is not written to the Local Memory, but it is stored in the encryption processing 
unit. 
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The effect of this is that when a destination overrun occurs, the ARC4 key, DES IV, and AES 
CBC IV stored in the encryption processing unit is not valid. If the command following a 
destination overrun is from a different session number, the processing units retrieve the 
appropriate context information from the Local Memory, which overwrites the invalid 
encryption information in the processing unit, and packet processing proceeds. However, if 
the command following a destination overrun is from the same session number, the 
processing units will not retrieve the encryption information from the Local Memory; 
incorrect encryption information contained in the processing units is used. 


For security protocols that use MAC, DES, 3DES, and AES keys, and also utilize new IVs for 
each packet (such as IPSec), the destination overrun condition does not affect the packet 
processing operation. However, the following note for setting new keys should be followed. 


Note 
When sending a new key in the command message for a packet, care must be taken to 
ensure that a destination overrun doesn’t occur. If a destination overrun does occur, 
the new key will have to be supplied with the next command message for this session. 


For security protocols that use ARC4 or DES IVs that chain between packets, the destination 
overrun condition affects packet processing operation. If a destination overrun condition 
occurs, restore the current key for ARC4 processing unit by: 


m = Passing the key again in the next operation for the current session, or 


m Performing an ARC4 operation with another session and then resume the operation 
in the current session. 


If an ARC4 operation is performed in another session, the 795x re-reads the current ARC4 
key from Local Memory and uses it for the ARC4 operation in the current session. 


The same operations are used to restore the IV: either the last 8 bytes of ciphertext from 
the previous packet are passed with the next operation in the current session, or an 
operation in another session is performed, and then operation is resumed in the current 
session. 


Programming the 795x to process packets with ARC4 (or chained DES IVs) can be done in 
one of two ways. The first method is to set the NEW KEY (or NEW IV) bit if the next 
command to use the engine has the same session number as the command causing the 
destination overrun. The second method is to interleave commands by using the engine 
with another session number before sending a command with the same session number that 
encountered the destination overrun. The new session number will cause the engine to 
retrieve the appropriate context information from the Local Memory, overwriting the invalid 
context information. 


Please note that these solutions squelch transmission of the packet that expanded. Also, 
please note that certain protocols may not allow restoration of previously used keys or IVs. 
Also note that reprocessing the expanded packet in the session can be another solution for 
protocols that use ARC4 or chained DES IVs; however, this will interrupt pipelined 
operations. 
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4.2.3. Descriptor-Based Destination Overrun 


If bit 4 of the DMA Configuration register is set to one, then the CPU controls the LAST bit 
in the Destination Data descriptor, and the 795x is configured to respond to descriptor- 
based destination overruns. These types of overruns occur when the amount of data 
transferred exceeds the DESTINATION LENGTH field of the Destination Data descriptor 
(or the sum total of bytes if multiple destination data descriptors are used). 


When a descriptor-based destination overrun occurs, the DEST OVER bit in the Destination 
Data Ring field of the DMA Status and Control register is set. Additionally, the OVER bit 
in the Destination descriptor and the OVER bit in the Result descriptor are set when the 
795x writes to those descriptors. 


Bit 25 in the DMA Interrupt Enable register is defined as the OVER interrupt enable. This 
bit is used to generate error detection when a destination data overrun occurs. 


4.3 Descriptor-Based Result Overrun 


Additionally, there can be result overruns. These are analogous to descriptor-based data 
overruns, except for results. 


If bit 4 of the DMA Configuration register is set to one, then the CPU controls the LAST bit 
in the Result descriptor and the 795x is configured to respond to descriptor-based result 
overruns. These types of overruns occur when the amount of results transferred exceeds 
the RESULT LENGTH field of the Results descriptor (or the sum total of bytes if multiple 
destination data descriptors are used). 


A results overrun condition occurs when the results generated by the 795x exceed the 
RESULT LENGTH field in the results descriptor. When a result overrun occurs, the 
RESULT OVER bit in the Result Ring field of the DMA Status and Control register is set. 
Additionally, the OVER bit in the Result descriptor is set when the 795x writes to this 
descriptor. 


Bit 17 in the DMA Interrupt Enable register is defined as the OVER interrupt enable. This 
bit is used to generate error detection when a result overrun occurs. 


4.4 Descriptor Overrun Effect On Descriptor Chains 


When a descriptor-based data overrun (or results overrun) occurs, the DMA engine discards 
any extra data (or results) for the current command. It then writes a 1 to the OVER bit and 
a 0 to the VALID bit in the corresponding descriptor, and thereafter it starts placing the 
data (or results) for the next operation in the next valid descriptor. 
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5 Session Context Memory 


The 795x utilizes a single 4K x 64 (32KB total) block of internal memory, called Local 
Memory, for session context storage. The mode of operation is configured after reset and 
determines how the context is stored in Local Memory resulting in a maximum number of 
sessions supported. 


5.1 Modes of Operation 


The 795x is configured to operate in one of three modes using the Packet Engine 
Configuration register. The mode of operation is set for the chip rather than per session. 
Once the mode is set, it applies to all sessions so there is no mixing and matching of 
modes. 


The Local Memory usage depends on the mode of operation that is selected. Table 5 lists 
the three modes of operation and the associated memory usage and number of sessions 
supported. 


Table 5 Local Memory Utilization 
Mode of Operation Memory per | Maximum Sessions 
Session Supported 


Multiple History (stateful compression) 16KB 2 
Encryption (including ARC4) + MAC + LZS or MPPC 
Compression (Full-Dup 


Single History (stateless compression) or No 512-bytes 64 w/o compression 
Compression 48 w/ compression 
ARC4/AES/DES 512-byte Encryption/MAC Context 

(Half-Duplex), LZS or MPPC Compression (Full- 


Single History (stateless compression) or No 128-bytes 256 w/o compression 
Compression 192 w/ compression 
AES/DES 128-byte Encryption/MAC Context (Half- 

Duplex), LZS or MPPC Compression (Full-Duplex 





There are three bits in the Packet Engine Configuration register that are used to select 
one of the three modes of operation. Compression is enabled/disabled using the COMPDIS 
bit. If compression is enabled, single or multiple history mode is configured using the 
COMP_CONFIG bit. If compression is disabled or single history mode is selected, the 
ENC_CONFIG bit is used to determine the amount of memory that will be used for the 
encryption/MAC context (ARC4 requires a larger context than AES/DES). 


5.1.1. Multiple History Mode Context Storage 


Figure 6 illustrates how multiple history context (with encryption, decryption, and 
compression) is stored in 795x Local Memory. The left side of the figure shows two multiple 
history full-duplex sessions stored inside the 795x Local Memory. The right side of the 
figure shows how the first session context breaks down into its individual components. The 
multiple history context consists of both encode and decode encryption and authentication 
context as well as compression and decompression histories. Note that the memory map is 
not drawn to scale. 
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When using LZS or MPPC compression in a multiple history context, memory is configured in 
such a way as to support a single full-duplex operation in a single 16KB block of memory. 
This includes support for two independent encryption contexts (encode and decode). For 
example, both an encode and decode operation may use the same session number. 


Multiple History 
byte address session Multiple History Context (16KB, Full-Duplex) 


Ox7FF8 
Encode Enc/MAC, 
+Decode Enc/MAC, Decode Enc/Mac Context 
+LZS/MPPC Full-Duplex 


or Descriptor Memory 
(16KB) Encode Enc/Mac Context 








0x4000 
Ox3FF8 


0x2200 | | DempFenceCntr | | DcmpHist8KPtr Sea CompHist8KPtr 


Compression History(1) 


Encode Enc/MAC, 
+Decode Enc/MAC, 
+LZS/MPPC Full-Duplex 
(16KB) 


Decompression History(1) 


0x0000 





Figure 6 Multiple History Mode Context Storage 


5.1.2 Single History Mode Context Storage 


Figure 7 illustrates where the history and Enc/MAC context is located in Local Memory. In 
single history mode, 8KB are reserved for the history. With LZS compression, only the 
lower 2KB are used for the history and the upper 6KB in this 8KB block may be used to 
store descriptors. The number of encryption/MAC sessions supported is dependent on the 
ENC_CONFIG bit setting in the Packet Engine Configuration register. This setting 
determines the amount of Local Memory used for each session. The amount of memory 
used for each session determines the maximum number of sessions (see Table 5). For 
details on the encryption/MAC context storage format, see Figure 8 and Figure 9. 
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Single History 
(COMP_CONFIG=0, COMPDIS=0) 
byte address session 


Optional Descriptor Memory 





0x2100 or 0x2400|128B or 512B Enc/MAC Half Duplex} 2 
0x2080 or 0x2200| 128B or 512B Enc/MAC Half Duplex| 1 
0x2000 | 128B or 512B Enc/MAC Half Duplex] 0 


Ox1FF8 


LZS/MPPC Full-Duplex 
(8KB) 
Addresses 0x0800-0x1FF8 available 
for descriptors if MPPC is not used. 


0x0000 


No Compression 
(COMP_CONFIG=0, COMPDIS=1) 
byte address session 


Optional Descriptor Memory 


0x0100 or 0x0400| 128B or 512B Enc/MAC Half Duplex} 2 
0x0080 or 0x0200| 128B or 512B Enc/MAC Half Duplex] 1 
0x0000 | 128B or 512B Enc/MAC Half Duplex} 0 





Figure 7 Single History or No Compression Mode Context Storage 


512B Enc/Mac Context (Half-Duplex) - Supports RC4, AES, DES 


Byte Offset: 
OxO1F8f 2 i st:: 


ENC context (8, 16, 24, 32, or 258 bytes) 























ENC IV (16 byt 


MAC Context (40 bytes) 


es for AES, 8 for all others) 























(1) Above context format is for 512B Enc/Mac context records in both single and multiple history configurations 
(2) Vertical axis not to scale 





Figure 8 512-byte Encryption/MAC Context Format 
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128B Enc/Mac Context (Half-Duplex) - Supports AES, DES 
Byte Offset: 
0x0078 : 


ENC context (8, 16, 24, or 32 bytes) 





ENC IV (16 bytes for AES, 8 for all others) 
MAC Context (40 bytes) 


5[5 4] 4 4/3 3/3 2|2 14 0] 0 

5 8|7 09 21 4/3 6|5 8|7 

(1) Above context format is for 128B Enc/Mac context records in Single History configuration, or lower 128B 
of encode and decode Enc/Mac context records in Multiple History configuration (remaining upper 384B 
unused) 

(2) Vertical axis not to scale 


























Figure9 128-byte Encryption/MAC Context Format 


5.1.3. No Compression Mode Context Storage 


Figure 8 illustrates how the context is stored in Local Memory in the no compression mode. 
When compression is disabled, the full 32KB of memory is available for ENC/MAC context. 
The number of encryption/MAC sessions supported is dependent on the ENC_CONFIG bit 
setting in the Packet Engine Configuration register. This setting determines the amount 
of Local Memory used for each session. The amount of memory used for each session 
determines the maximum number of sessions (see Table 5). For details on the 
encryption/MAC context storage format, see Figure 8 and Figure 9. 
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6 Registers 


This section describes the 795x registers, how they are used, what offset address they are 
located at, and their detault reset state. Register descriptions are grouped by register 
function. For easier reference, the following tables provide register offset addresses for 
each of the 795x modes. 


6.1 PCI Mode Register Map 


Table 6 PClI-Mode Register Map 


mm 
c |e 


Size 
(bytes) 


Reference 








AAA 


a a 
Packet Engine Interrupt Status R/W X 0x08 Section 6.5.2 
Packet Engine Configuration R/W * Ox0C Section 6.5.3 
Packet Engine Interrupt Enable R/W 0x10 Section 6.5.4 
| 


Packet Engine Status | R | 


BS 


Tx [Conia [4 Section 55 


| Packet Engine Control | R/W YX 0x28 | 4 | Section 6.5.1 | 


|FIFO Status | RUT | | Xx | 4 | Section6.4.1 | 
L FIFO Configuration RW xX oxic | 4 | Section 6.4.2 


BS 


AA 


Section 6.6.1 





Section 6.6.1 





Section 6.6.1 





Section 6.6.1 





Section 6.6.1 





MK | K | XK | XK |< |X |< 


Section 6.6.1 





Mute Table Entry1 
Mute Table Entry2 
Mute Table Entry3 
Mute Table Entry4 
Mute Table Entry5 
Mute Table Entry6 
Mute Table Entry7 


A/ASA/HA/AI APH 


Section 6.6.1 


BS 


iste Table-Entrys yw x|-oxFo [4 | Section 6.6.1 


Section 6.3.1 





Section 6.3.2 





Section 6.3.3 





Section 6.3.4 





Section 6.3.5 





DMA Interrupt Enable Section 6.3.6 





DMA Command Ring Address 
DMA Source Data Ring Address 
DMA Result Ring Address 

DMA Destination Data Ring 
Address 

DMA Status and Control 


A/HAIA] HR [AIAIA 


DMA Configuration #1 Section 6.3.7 


DMA Configuration #2 RywW_|-[ x || oxec[ 4] Section 6.3.8 


PEL Configuration __/ rw |_| % | _1_oxic_{_4_/ Section 8.34.4 __ 
X oe eee 


BS 


AA 








Global Status ar OxFO Section 6.12.1 
PCI BARO Shadow 0xCO Section 6.12.2 
PCI BAR1 Shadow OxC4 Section 6.12.3 


AAA 


Fox [4 | Section 12.4 


BS 


Section 6.7.1 





Section 6.7.2 





Section 6.7.3 





Public/RNG Reset Register a 0x0204 
Public Operand Length 0x0304 
Public Operation 0x0308 
Public Status al 0x030C 


A/ASALL 


Section 6.7.4 


Public Interrupt Enable raw ox0310 | 4 |Section6.7.5 


BS 
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| Public Key EngineMode_ | R/W | | X | | (0x0320 
Public Key Command FIFO PX 0x0380 


| RNG Configuration Ss | R/W || X | | Ox0314 | 4 | Section 6.10.1 
RNG Data RX 0x0318 


| Public Key Memory RW Xd 0x0400 | 4K 
[LocalMemory CT RW XT oxo] 32K | 
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6.2 PowerQuicc | & Il Register Map 


Table 7 PowerQuicc | & Il Modes Register Map 


pe 
oc 


Packet Engine Interrupt Status R/W 0x08 0x000 
Packet Engine Configuration R/W Ox0C 0x000C 
Packet Engine Interrupt Enable R/W 0x10 0x0010 


Packet Engine Status | R {| «| —oxi4_ | 0x0014 
Packet Engine Control PR/W] sid | 0x0028 


FIFO Status | R_[| | xis | 0x0018 
FIFO Configuration PR/W{ oxic | 0x001C 


Mute Table Entry1 
Mute Table Entry2 
Mute Table Entry3 
Mute Table Entry4 
Mute Table Entry5 
Mute Table Entry6 
Mute Table Entry7 


| Mute Table Entry8 RW oF 0x00FO | 4 


DMA Command Ring Address 0x2000 
DMA Source Data Ring Address 

DMA Result Ring Address 

DMA Destination Data Ring Address 

DMA Status and Control 

DMA Interrupt Enable 

DMA Configuration #1 


DMA Configuration #2 ER/W x6 | 0x206C 


0x2000 
ECR OR 0x98 | 02098 


Global Status R/W OxFO 0x20F0O 4 
PCI BARO Shadow R 0xCO 0x20C0 
R 


Base 
Address 
Actual 
Start 
Address 


lee) 


ALAA ALA/HI AFA HFA AIA! ALA Size 
(Bytes) 


























BS 




















A/A[A/AIA/ ALA 








4 
PCI BAR1 Shadow OxC4 0x20C4 4 


L PCI BAR2 Shadow ER xC8 0208 


Public/RNG Reset Register R/W 0x0204 0x2204 
Public Operand Length R 0x0304 0x2304 
R 
R/W 








Public Operation 0x0308 0x2308 

Public Status 0x030C 0x230C 
| Public Interrupt Enable R/W IT x0310 | 0x2310 | 4 | 
| Public Key EngineMode CT R/W 00320 | 0x2320 | 4 | 


: 0x0380 - 
Public Key Command FIFO i 0x03FC 0x2380 


RNG Configuration IR/W] Sd 00314 0x2314 
RNG Data 0x0318 0x2318 


PRi{| | 
0x2400 
0x33FC 
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Base 
Address 
Actual 
Start 
Address 





0x8000 
Local Memory ryw | oxsoo00 | 0X0000 - = 32K 
OXZFFC: || GxFrrC 


6.3 DMA Interface Registers 


The valid offsets for DMA interface register accesses are defined below. 


Table 8 DMA Register Summary 


[Name C“‘(‘#OC*dPCI Adress 


BAR1) + 0x44 
BAR1) + 0x48 
BAR1) + 0x6C 


BAR1) + 0x98 
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6.3.1 DMA Command Ring Address Register 


DMA Command Ring Address (Read/Write) (BAR1) + 0x0C 


oO 





COMMAND RING ADDRESS 


Bit = 
Fig [rere [pean 


RESERVED RESERVED must be set to 0b00. 
31:2 COMMAND RING | Address of the DMA command ring. This is a Double-Word aligned 
: ADDRESS byte address; bits [1:0] must be set to 0b00. 
Register Description 
Points to the next Command Descriptor. 
On reset, the value of this register is OxO0000000. 
6.3.2 DMA Source Data Ring Address Register 


DMA Source Data Ring Address (Read/Write) (BAR1) + 0x1C 


[a 
Ww 
> ~ 
a) 
Wo 
” 
Ww 
oc 





oO 





SOURCE DATA RING ADDRESS 


RESERVED |+ 
(00) 


Bit oon 
Fig [rome [oso 
| 1:0 | 


1:0 RESERVED RESERVED must be set to 0b00. 


31:2 SOURCE DATA Address of the DMA source data ring. This is a Double-Word aligned 
: RING ADDRESS byte address; bits [1:0] must be set to 0b00. 


Register Description 


Points to the next Source Data Descriptor. 
On reset, the value of this register is OxO00000000. 
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6.3.3 DMA Result Ring Address Register 


DMA Result Ring Address (Read/Write) (BAR1) + 0x2C 


oO 





RESULT RING ADDRESS 


Bit ee 
Fig [rere [pean 


RESERVED RESERVED must be set to 0b00. 


. PACKEEN@INE Address of the DMA result ring. This is a Double-Word aligned byte 
31:2 | RESULT RING ddress; bits [1:0] must be set to 0b00 
ADDRESS eee 
Register Description 
Points to the next Result Descriptor. 
On reset, the value of this register is OxOO000000. 
6.3.4 DMA Destination Data Ring Address Register 


DMA Destination Data Ring Address (Read/Write) (BAR1) + 0x3C 


a 
Ww 
> ~ 
a) 
Wo 
” 
Ww 
oc 





oO 





DESTINATION DATA RING ADDRESS 


Bit ea 


RESERVED 
(00) 


RESERVED RESERVED must be set to 0b00. 


31:2 Lane Address of the DMA Destination Data ring. This is a Double-Word 
: ADDRESS aligned byte address; bits [1:0] must be set to Ob00. 


Register Description 


Points to the next Destination Data Descriptor. 
On reset, the value of this register is OxOO000000. 
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6.3.5 DMA Status and Control Register 


DMA Status and Conirol (Read/Write) (BAR1) + 0x40 


28 27 26 25 24 2322 21 20 19 18 17 16 15 14 


WwW 


1110 9 87 6 


as 





DEST RING CONTROL 
DEST PCI ABORT 
DEST DONE 
DEST LAST 
DEST WAITING 
DEST OVER 
RESERVED 
RESULT RING 
CONTROL 
RESULT PCI ABORT 
RESULT DONE 
RESULT LAST 
RESULT WAITING 
RESULT OVER 
RESERVED 
SOURCE RING 
CONTROL 
SOURCE PCI ABORT 
SOURCE DONE 
SOURCE LAST 
SOURCE WAITING 
RESERVED 
COMMAND RING 
CONTROL 

COMMAND PCI ABORT | 
COMMAND DONE 
COMMAND LAST 

COMMAND WAITING |~ 
PUBLIC DONE 
ENGINE IRQ 

























































































Bit ee 
Bie [wm [oween 


Controls the polling of Destination descriptors: 
Value Control Description 
DEST RING NOP (no effect; used when updating other fields in 
31:30 CONTROL the register) 


Disable. After the current descriptor is processed, 
the Dest ring will be disabled. 
Enable. Enables the polling of the Dest descriptors. 
Reserved. 
A PCI initiator or target abort occurred while processing a 
DEST PCI ABORT | Destination descriptor. This is a fatal error and will halt descriptor 
processing on all four descriptor engi 


If one, the Destination descriptor processing is complete, and the 
DESUheat descriptor had its LAST bit set. 
DEST WAITING If one, the current Destination descriptor does not have its VALID 
bit set to one. 
25 DEST OVER If one, the Destination descriptor processing overflowed producing 
more data than allocated. 


| 28 | DEST DONE If one, the Destination descriptor processing is complete. 


| 24 | RESERVED 


23:22 RESULT RING Controls the polling of the packet engine Result descriptors. The 
CONTROL encoding is the same as with the Dest Ring Control field. 
RESULT PCI A PCI initiator or target abort occurred while processing a Result 


descriptor. This is a fatal error and will halt descriptor processing 
ABORT . . 
on all four descriptor engines. 


RESULT DONE If one, the Result descriptor processing is complete. 


If one, the Result descriptor processing is complete, and the 
i pESUer Eee descriptor had its LAST bit set. 


18 RESULT WAITING If one, the current Result descriptor does not have its VALID bit 
set to one. 

17 RESULT OVER If one, the Result descriptor processing overflowed producing more 
data than allocated 


RESERVED 


15:14 SOURCE RING Controls the polling of the packet engine Source descriptors. The 
: CONTROL encoding is the same as with the Dest Ring Control field. 


29 
28 
27 
26 
24 
21 
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A PCI initiator or target abort occurred while processing a Source 
SOURCE PCI . nae : : . 

descriptor. This is a fatal error and will halt descriptor processing 
ABORT : : 

on all four descriptor eng 


a SOURCE DONE If one, the Source descriptor processing is complete. 
If one, the Source descriptor processing is complete, and the 
| 11 | SOURCE aa descriptor had its LAST bit set. 
ie ee If one, the current Source descriptor does not have its VALID bit 
WAITING set to one. 


—_ RESERVED 


7:6 COMMAND RING | Controls the polling of the packet engine Command descriptors. 
j CONTROL The encoding is the same as with the Dest Ring Control field. 
COMMAND PCI A PCI initiator or target abort occurred while processing a 


Command descriptor. This is a fatal error and will halt descriptor 
ABORT : : : 
processing on all four descriptor engines. 


COMMAND DONE | If one, the Command descriptor processing is complete. 
If one, the Command descriptor processing is complete, and the 
eisudriieaaakenal descriptor had its LAST bit set. 
5 COMMAND If one, the current Command descriptor does not have its VALID 
WAITING bit set to one. 


If one, in the compatibility mode, the Public Key Engine is done 
with the current operation in 7951-Compatible Public 
Operation register (see Section 6.8.2); in the Enhanced Mode, 
the Public Key Engine has completed the operation in Public 
Operation register, and the Public Key FIFO EMPTY bit is set in 
1 PUBLIC DONE Public Status register (see Section 6.7.4). 
This bit is only valid when the PUBLIC DONE interrupt enable bit 
is set in the Public Interrupt Enable register (see Section 
6.7.5). When this interrupt enable bit is set, the bit in the DMA 
Status and Control register contains the status of the PUBLIC 
DONE bit in the Public Status register (see Section 6.7.4). 


| 0 | ENGINEIRQ _| If one, the Packet Engine produced an interrupt. 


Register Description 
On reset, the value of this register is 0x40404040. 





6.3.6 DMA Interrupt Enable Register 


DMA Interrupt Enable (Read/Write) (BAR1) + 0x44 


31 30 29 28 27 26 25 


rare 
WwW 
rae 
N 
rae 
oO 
oO 
ee) 


5 4 3 2 1 0 





WAITING 
RESERVED 
PCI ABORT 

WAITING 
RESERVED 
PCI ABORT 

DONE 

WAITING 

ILLEGAL WRITE 
RESERVED |o 
CMD DONE 
CMD LAST 
CMD WAITING 
ENGINE IRQ 


wi 
2 
fe) 
a 
i) 
— 
ao 
> 
a 


RESERVED 
PCI ABORT 
ILLEGAL READ 


[oe 
oc 
fe) 
rr] 
< 
(S) 
a 
Qa 
= 
) 






















































































€ Destination Ring > € Result Ring > € Source Ring > <€ Command Ring > 
Enables interrupts on many of the conditions associated with the DMA Status and Control 
register ((BAR1 / 0x2000) + 0x40). 





On reset, the value of this register is OxOO000000. 
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6.3.7 DMA Configuration Register #1 


DMA Configuration #1 (Read/Write) (BAR1) + 0x48 


31 30 29 28 27 26 25 24 23 16 1514131211109 8 7 5 43 210 





POLLING FREQUENCY 


MST_RST# 


LM_SWAP8 


RESERVED (00) 
DMAOUT_SWAP8 
DMAIN_SWAP8 
DMAOUT_SWAP32 
DMAIN_SWAP32 
RESERVED 
LM_SWAP32 
RESERVED 
INVALID POLL 
SCALER 
RESERVED (000) 
SOFTWARE LAST 
RESERVED (0) 
RESERVED (1) 
DMA_RST# 
























































Bit a 
Fig rome Jomo 


RESERVED 


Outbound descriptor is Big-Endian. When this bit is set, the 
29 DMAOUT_SWAP#8 | bytes within 32-bit Double Word will be transposed (see Section 
1.3 for more information on endianness control). 
Inbound descriptor is Big-Endian. When this bit is set, the bytes 
28 DMAIN_SWAP8 within 32-bit Double Word will be transposed (see Section 1.3 for 
more information on endianness control). 
When this bit is set, the two 32-bit Double Word fields will be 
27 DMAOUT_SWAP32 | transposed (see Section 1.3 for more information on endianness 
When this bit is set, the two 32-bit Double Word fields will be 
DMAIN_SWAP32 transposed (see Section 1.3 for more information on endianness 


RESERVED Must be set to zero. 


This field sets the polling rate with which the 795x accesses the 
PCI bus. This field is useful in controlling the amount of PCI bus 
bandwidth used when there is current DMA activity. This setting 
is in multiples of 16 engine clock cycles. A value of 00h disables 
the polling function and is used for diagnostic purposes only. The 
table below shows the bandwidth used for different Polling 
frequency values and the maximum amount of PCI bandwidth 
(out of a possible 132 MB/s) the 795x is allowed to use. Note 
that the values below are examples, and actual bandwidth may 
vary. 


POLLING 


FREQUENCY avg Burst Polling Freq. Bandwidth Used 


64 11111111 0.52 MB/s 
64 10000000 1.04 MB/s 
64 01000000 2.08 MB/s 
00100000 4.17 MB/s 
00010000 8.33 MB/s 
00001000 16.7MB/s 
00000100 33 MB/s 
00000010 50 MB/s 
00000001 50 MB/s 
00000000 Disabled 


This bit controls endianness for accesses on the PCI bus (local 

memory contents must be in little endian format). When this bit 
i EM Sw Ahee is set, the two 32-bit Double Word fields will be transposed (see 

Section 1.3 for more information on endianness control). 
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This bit controls endianness for accesses on the PCI bus (local 

memory contents must be in little endian format). When this bit 
m4 EM SWAPS is set, the bytes within 32-bit Double Word will be transposed 
see Section 1.3 for more information on endianness control). 


This field selects the frequency with which the 795x polls an 
invalid descriptor, until it becomes valid. This field is useful to 
control the amount of PCI bus bandwidth used when there is no 
current DMA activity. The table below shows the cycles between 
polls for different Invalid Poll Scalar values. 


The Invalid Poll Scalar value is only used when the 795x has 

already detected an invalid descriptor. However, if the polling 

frequency value is greater than the invalid poll scalar (polling 

frequency is slower than Invalid Poll Scalar frequency), the poll 

frequency is used. When the polled descriptor is valid, only the 
Se ree Por polling frequency is used to set 795x PCI bus requests. 


Invalid Poll Engine CLK Cycles Between Polls of an 
Scalar Value Invalid Descriptor 
000 256 
001 512 
010 768 
011 1024 
100 1280 
101 1536 
110 1792 
111 2048 


RESERVED 


This bit indicates whether the Dest Data Descriptor and Result 
Descriptor LAST bit is controlled by the system or the 795x. The 
system always controls the LAST bit in the Command Descriptor 
and Source Data Descriptor. 
If this bit is set to 0, the 795x controls the LAST bit in the Dest 
Data and Result Descriptors. The 795x sets this bit when the 

4 SOFTWARE LAST | current descriptor represents the last descriptor in a command. 
If this bit is set to 1, the host CPU controls the LAST bit in the 
Dest Data and Result Descriptors. The 795x reads this bit to 
determine when a descriptor represents the last descriptor in a 
buffer. If the 795x finishes a command but has not detected a 
LAST bit, it searches forward through the ring until it finds the 
LAST bit set in a descriptor. 


RESERVED 
RESERVED 


Setting this bit to 0 resets the DMA descriptor engines. 
1 DMA RST# In order to reset the DMA engine, the poll frequency must first be 
= set to 0 and the system must wait 1 ms to ensure that queued 
DMA operations are complete. DMA_RST# can then be set to 0 
to enable the reset. Setting DMA_RST# to 1 will clear the reset. 
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Setting this bit to 0 resets the descriptor engines and the packet 
engine registers. The MST_RST# does not reset the Public/RNG 
hardware. The Public/RNG has its own independent reset as 
defined in the Public/RNG Reset register. Setting this bit is 
equivalent to setting the DMA_RST# bit in this register and the 
PACKET ENGINE RESET bit in the Packet Engine Control 
register. 


When setting the MST_RST# bit from 1 to 0, the poll frequency 
must first be set to 0. The system must wait 1ms to ensure that 
queued DMA operations are not interrupted in the middle of their 
processing. Then the MST_RST# bit may be set to 0. 


MST_RST# Before setting the MST_RST# bit back to 1, the system must 
first poll for the PACKET ENGINE RESET bit in the Packet 


Engine Control register to verify that it has been set to 1. 
Then the MST_RST# bit may be set to 1. 


After the MST_RST# bit has been set to 1 and before writing to 
any other register, the system must first poll for the PACKET 
ENGINE RESET bit in the Packet Engine Control register to 
verify that it has been to 0. Then the 795x is ready for use. 


When MST_RST# bit is zero, the packet engine will not respond 
to register reads/writes. The MST_RST# bit controls the reset 

signal to the entire packet engine core. While in reset, the core 

cannot respond to any signals. 


Register Description 


This register contains 7951-compatible bit fields and additional 795x specific bit fields. 





On reset, the value of this register is OxOO000000. 
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6.3.8 DMA Configuration Register #2 


DMA Configuration #2 (Read/Write) (BAR1) + 0x6C 


2019181716 1514131211109 8 7654321 





RESERVED 


BARO_SWAP8 


PK_SWAP32 
PK_SWAP8 
BARO_SWAP32 
RESERVED 
INITIATOR WRITE 
BURST_LENGTH 
RESERVED 
INITIATOR READ 
BURST_LENGTH 
RESERVED 
TARGET WRITE 
BURST_LENGTH 
RESERVED 
TARGET READ 

BURST_LENGTH |© 












































This bit controls the endianness to the Public Key engine registers 

and Public Key memory. When this bit is set, the two 32-bit 

Double Word fields will be transposed (see Section 1.3 for more 

information on endianness control). 

This bit controls the endianness to the Public Key engine registers 
PK SWAP8 and Public Key memory. When this bit is set, the bytes within the 


a 32-bit Double Word fields will be transposed (see Section 1.3 for 
more information on endianness control). 


This bit controls the endianness to the BARO registers. When this 
BARO_SWAP32 bit is set, the two 32-bit Double Word fields will be transposed 
see Section 1.3 for more information on endianness control). 


This bit controls the endianness to the BARO registers. When this 
BARO_SWAP8 bit is set, the bytes within the 32-bit Double Word fields will be 
transposed (see Section 1.3 for more information on endianness 


This two-bit field determines how many bytes are transferred in 
each burst write cycle initiated by the 795x. This field is encoded 
as follows: 
INITIATOR 
13:12 | WRITE Burst Size (Bytes) 


BURST_LENGTH not supported 
32 
64 
128 


RESERVED a 


This two-bit field determines how many bytes are transferred in 
each burst read cycle initiated by the 795x. This field is encoded 
as follows: 
INITIATOR READ 
Value Burst Size (Bytes) 
BURST LENGTH Burst Size (Bytes 


8 
32 
64 

128 


RESERVED. | ——SOSC=C“C;C;7<; ;SESSCSC<~;<CSCSCS*C*<‘<‘<‘“; ;<C OY 





7954/7955/7956 - Hardware User Guide, UG-0034-03 68 
Hifn Confidential 


oe LD el | 


This two-bit field determines how many bytes are accepted in each 
burst write cycle targeted to the 795x. This field is encoded as 
follows: 


TARGET WRITE F 

BURST LENGTH a Burst =a (Bytes) 
O01 32 
10 64 
11 128 


RESERVED 


This two-bit field determines how many bytes are accepted in each 
burst read cycle targeted to the 795x. This field is encoded as 
follows: 


pUner MeNGTa Value Burst size (Bytes) 
32 
64 
128 
Register Description 
On reset, the value of this register is 0x00003320. 
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6.4 DMA-FIFO Registers 


The FIFO registers are accessed at memory location BARO + offset. The valid offsets for 
packet engine register accesses are defined below. 


Table 9 FIFO Register Summary 


[Name CPC Address 


FIFO Status BARO) + 0x18 
FIFO Configuration BARO) + 0x1C 





6.4.1. FIFO Status Register 


FIFO Status (Read Only) (BARO) + 0x18 





SOURCE FIFO FREE 
SPACE 


Bit ree 


31:15 | RESERVED 


RESERVED DEST FIFO DATA 


RESERVED |~ 


; FREE SPACE as a seven-bit unsigned binary number. 
7 
a seven-bit unsigned binary number. 
Register Description 


The FIFO Status register reports the amount of free space in the Packet Engine’s Source and 
Destination FIFOs. These FIFOs are each 64 bytes deep. 


This register is provided for backward compatibility. The Packet Engine’s DMA units deal with 
the FIFOs transparently. The FIFOs rarely, if ever, require direct manipulation. 





On reset, the value of this register is Ox00004000. 
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6.4.2 FIFO Configuration Register 


FIFO Configuration (Read/Write) (BARO) + 0x1C 





RESERVED (0000_0000_0000_0000_0000_0100_0000_0000) 


Bit Bs 
Fig nome [osm 
Eston 


31:0 RESERVED Must be set to 0x0000 0400. 


Register Description 
The FIFO Configuration register is another register provided for backward compatibility. 


The register must be initialized to 0x00000400. 


On reset, the value of this register is OxO00000000. 





6.5 Packet Engine Registers 


The packet engine registers are accessed at memory location BARO + offset. The valid 
offsets for packet engine register accesses are defined below. 


Table 10 Packet Engine Register Summary 


[Name CS PC Address 
BARO / 0x0000) + 0x08 
Packet Engine Configuration (BARO / 0x0000) + Ox0C 


Packet Engine Interrupt Enable BARO / 0x0000) + 0x10 
Packet Engine Status BARO / 0x0000) + 0x14 
Packet Engine Control BARO / 0x0000) + 0x28 
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6.5.1 Packet Engine Control Register 


(BARO / 0x0000) + 0x28 


Packet Engine Control (Read/Write) (BARO / 0x0000) + 0x04 


oO 








fFieia [Name 
Field 
1 


PACKET ENGINE 
RESET 


The Packet Engine Control register controls some of the Packet Engine’s basic functionality. 


RESERVED (00_0000_0000_0000_0000_0000_0000_0000) 


RESERVED (1) |+ 
PACKET 
ENGINE RESET 











Description 


Must be set to zero. 

Must be set to one. 

Setting this bit to one causes a software reset of the Packet Engine, 
which is equivalent to a hardware reset except that the Packet 
Engine Configuration register is unaffected. The Source and 
Dest FIFOs are reset and the packet engine pipeline is reset 
(operations in progress are abandoned). Because a soft reset causes 
operations to be abandoned, rather than completed, some 
information in Local Memory may be corrupted by a soft reset. 


The PACKET ENGINE RESET bit will return to zero after the reset 
sequence is complete. Until it returns to zero, the packet engine 
registers should be left alone, except reading the Packet Engine 
Control register to poll this bit. 

Register Description 


This register is provided at offset 0x04 only for backwards compatibility. Using offset 0x04 
can cause the device to hang on 64-bit systems or systems that may access reserved offset 
0x00 during accesses to offset 0x04. 





On reset, the value of this register is undefined. 


7954/7955/7956 - Hardware User Guide, UG-0034-03 


Hifn Confidential 


72 


aoe LD oe | 


6.5.2 Packet Engine Interrupt Status Register 


Packet Engine Interrupt Status (Read/Write) (BARO / 0x0000) + 0x08 


14 13 12 1110 


N 
op) 
pe 





RESERVED 


Fieia [Name 
Field 
INVALID 
14 
READY 
12 
11:10 


DEST OVERRUN 


COMMAND 
CONTEXT 


DEST RESULT 
:0 RESERVED 


INVALID 
COMMAND 
RESERVED 

SOURCE FIFO 
READY 
DEST FIFO 
READY 
RESERVED 
DEST OVERRUN|\© 
RESERVED _|co 
SOURCE 
COMMAND 
SOURCE 
CONTEXT 
SOURCE DATA | 
DEST DATA 
RESERVED  |w 
DEST RESULT | 
RESERVED 


Description 

Must be set to zero. 

If one, an illegal command was issued to the Packet Engine. 
Must be set to zero. 

If one, the Source FIFO is ready for more data. 


If one, the Dest FIFO is ready for more data. 

Must be set to zero. 

If one, the command produced more output bytes than specified in 
the Dest Count command parameter. 

Must be set to zero. 


If one, the Source FIFO is in the command phase. 


If one, the Source FIFO is in the context phase. 


If one, the Source FIFO is in the data phase. 
If one, the Dest FIFO is in the data phase. 
Must be set to zero. 
If one, the Dest FIFO is in the result phase. 
Must be set to zero. 

Register Description 


The Packet Engine Interrupt Status register reports on the status of the Packet Engine. The 
bits correspond to interrupt conditions. When one of these conditions takes place, the 
corresponding bit is set to one. The bits in this register are persistent; to clear a bit, the user 
must write a one to the corresponding bit position. This register is used to support interrupt 
service routines. Software polling can also use the Packet Engine Status register, which does 
not have persistent bits, but shows the state of the packet engine in real time (except after fatal 
errors, in which case the register contents are frozen). 





At Reset, the value of this register is OxO0000000. 
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6.5.3. Packet Engine Configuration Register 
Packet Engine Configuration (Read/Write) (BARO / 0x0000) + 0x0C 


151615 


(o>) 
ul 
mS 
wW 
N 
oO 





RESERVED 


RESERVED (1101) 


RESERVED 


ENC_CONFIG 


RESERVED (0) 


COMPDIS 
RESERVED 
COMP_CONFIG 
































Bit er 
Fig [tome [on 


31:15 | RESERVED Must be set to zero. 


Setting this bit disables the compression engine. When set, no 
16 COMPDIS context memory is allocated for compression history and the 
COMP_CONFIG bit is ignored. 


15:10 | RESERVED Must be set to zero. 
19:6 | RESERVED Must be set to 1101. 


Setting this bit to one causes the next read of the Packet 
Engine Status register to return the chip ID rather than the 

CHIP ID current status. After the Packet Engine Status register is 
read, it returns to its normal function and this bit is reset to zero. 
This is a 7751 compatibility feature and would not normally be 
used in 795x-specific code. 


[4:3 | RESERVED | Mustbesettozero, 
Enables single- history or multi-history modes of Local Memory 
2 | cour cone CONFIG jcour_conria | socaton 0 = multi-history, 1 = single history. See Section 5 for 
more information. 
Selects the size of the encryption/MAC context. 
ENC_CONFIG 0 = 512 bytes of context, 1 = 128 bytes. A 128-byte context will 
not accommodate ARC4 encryption. 
[OJ RESERVED | Mustbesettozero, 
Register Description 
The Packet Engine Control register controls some of the Packet Engine’s basic 
functionality. 





On reset, the value of this register is OxOO000000. 
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6.5.4 Packet Engine Interrupt Enable Register 


Packet Engine Interrupt Enable (Read/Write) (BARO / 0x0000) + 0x10 


= 
BS 


13 12 1110 


N 
(o>) 
pe 





RESERVED 


Fea [Name 
Field 
INVALID 
14 
READY 
12 
11:10 


DEST OVERRUN 


COMMAND 
CONTEXT 


DEST RESULT 
:0 RESERVED 


INVALID 
COMMAND 
RESERVED 

SOURCE FIFO 
READY 
DEST FIFO 
READY 
RESERVED 
DEST OVERRUN|\© 
RESERVED _ |c 
SOURCE 
COMMAND 
SOURCE 
CONTEXT 
SOURCE DATA | 
DEST DATA 
RESERVED |w 
DEST RESULT | 
RESERVED 


Description 

Must be set to zero. 

If one, an illegal command was issued to the Packet Engine. 
Must be set to zero. 


If one, the Source FIFO is ready for more data. 


If one, the Dest FIFO is ready for more data. 
Must be set to zero. 
If one, the command produced more output bytes than specified in 


the Dest Count command parameter. 
Must be set to zero. 


If one, the Source FIFO is in the command phase. 


If one, the Source FIFO is in the context phase. 


If one, the Source FIFO is in the data phase. 
If one, the Dest FIFO is in the data phase. 
Must be set to zero. 
If one, the Dest FIFO is in the result phase. 
Must be set to zero. 

Register Description 


The Packet Engine Interrupt Enable register selects the conditions under which 
interrupts will be asserted. Setting a bit to one enables the associated interrupt; zero disables 
it. The bit mappings are the same as in the Packet Engine Interrupt Status and Packet 
Engine Status registers. See the Packet Engine Interrupt Status register for details of 


the bit mappings. 





On reset, the value of this register is OxOO000000. 
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6.5.5 Packet Engine Status Register 


Packet Engine Status (Read Only) (BARO / 0x0000) + 0x14 


pe 
as 
(o>) 
Bb 





RESERVED 


INVALID 
COMMAND 
RESERVED 

SOURCE FIFO 
READY 
DEST FIFO 
READY 
RESERVED 
SOURCE 
COMMAND 
SOURCE 
CONTEXT 
SOURCE DATA | 
DEST DATA /|4 
RESERVED  |w 
DEST RESULT | 
RESERVED 


Bit =r 


31:16 | RESERVED 


INVALID : : ; 
COMMAND If one, an illegal command was issued to the Packet Engine. 


14 RESERVED 


aii ce If one, the Source FIFO is ready for more data. 


12 DEST FIFO READY | If one, the Dest FIFO is ready for more data. 
11:8 RESERVED 


aD If one, the Source FIFO is in the command phase. 


If one, the Source FIFO is in the context phase. 
If one, the Source FIFO is in the data phase. 
If one, the Dest FIFO is in the data phase. 
If one, the Dest FIFO is in the result phase. 
5 
Register Description 


The Packet Engine Status register reflects the state of the packet engine in real time. Some 
of these status bits are asserted for very brief periods and should be polled from the Packet 
Engine Interrupt Status register. Bits in the Packet Engine Interrupt Status register 
are persistent until cleared. 


On reset, the value of this register is Ox00002090. 
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6.6 Mute Table Registers 


A muting table provides the mask that controls the input to the MAC processor. The mask 
nulls specific segments of the data packet prior to being submitted to the MAC processor. 
The masks are programmable through the host bus and are selected by MAC command. 


Each Muting Table entry is 32 bits wide to mute up to 16 bytes of the packet data (128 
bits). There are eight entries in the Muting Table. See Table 11 for the mute table address 
map. 


The mute tables are nibble-based, and require a 32-bit register word to support a 16-byte 
header. The mute tables are mapped into Group O register space, starting at address 0x80. 
The registers are spaced four words apart, leaving room for future growth as either bit- 
based or 64-byte tables. These registers are implemented as a 8x32 scannable register 
bank for testability. 


Table 11 MAC Mute Table Address Map 


[Name Cd PCI Address 
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6.6.1 MAC Mute Table Entry Registers 


The Mute Table field in the MAC command structure determines the functionality of the Mute 
Table entry register. A zero value in this field disables the Mute Table feature. A nonzero 
value is an index into the Muting Table. Each bit of the Mute Table Entry Register masks 
the MAC function for one nibble of the packet. For this reason, the mute starting position is 
limited to the packet header. 


Mute Table Entry (1-8) (Read/Write) (BARO / 0x0000) + 0x80 ~ OxFO 





B14_LM |n 








































































































Description 


B15 LM Byte 15 bits [3:0] nibble mute enable (1 = mute 
| B15 HM  _—_| Byte 15 bits [7:4] nibble mute enable (1 = mute 


Byte 0 bits [3:0] nibble mute enable (1 = mute 
|BO.HM  ~—_—_| Byte 0 bits [3:0] nibble mute enable (1 = mute 


Register Description 
On reset, the value of this register is unknown. 
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6.7 Public Key Engine Registers 


The Public Key Engine can function in two modes; Enhanced and 7951-compatible. The 
following two sections describe the registers for both modes. The Public Key Engine mode 
selection is determined through device configuration during initialization period. The default 
mode shall be the 7951-compatible mode of operation. A summary of the Public Key Engine 
registers is shown in Table 12. 


Table 12 Public Key Engine Registers Summary 


[Name SCSC~C~CSC*dCPC. Address 
Public/RNG Reset BAR1 / 0x2000) + 0x204 
Public Operand Length BARi / 0x2000) + 0x304 





6.7.1. Public/RNG Reset Register 


Public/RNG Reset (Read/Write) (BAR1 / 0x2000) + 0x204 





RESERVED 














Bit 0 is the least-significant bit. RESERVED bits must be written with Os and ignored when read. 


Bit Description 
Field 
peSdiet | JRESERVED 9 ae eee ee ee ee 
RESET Set this bit to 1 to reset the Public/RNG (Random Number 
Generator) hardware. When read, this bit is a 1 while the device is 
performing a reset operation (either a hardware or software reset). 
The Public and RNG registers should not be accessed while this bit 
is a 1 (except to read the Public/ RNG Reset register). After 
the reset operation is complete, this bit returns to O. 
Register Description 
Use this register to configure/reset the Public Key Engine and the Random Number Generator. 





On reset, the value of this register is zero. 
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6.7.2 Public Operand Length Register 


Public Operand Length (Read Only) (BAR1 / 0x2000) + 0x304 


28 27 24 23 20 19 





RESERVED | RED_LEN | RESERVED EXP_LEN MOD_LEN 


Field 
[31:28 RESERVED. | OOCOCOOOCS 
27:24 | RED_LEN Length of reducend. Actual reducend length in bits is 
(RedLen+2)*ModLen*32 (RedLen = 0 to 13). Actual reducend 
length must be less than or equal to 6,144 bits or 15* ModLen*32, 
(RedLen of 13), whichever is smaller. The minimum reducend 


23:20 | RESERVED 


19:8 | EXP_LEN Length of exponent. Actual exponent length in bits is ExpLen+1. 
Actual exponent length must be between 2 (ExpLen of 1) and the 
actual modulus length (ModLen*32), inclusive. The most- 
significant bit of the value of the exponent (not the length) must be 
al. 


RESERVED |N 


Bits 19:8 (EXP_LEN) have more than one meaning depending on 
the public key operation being performed. These bits represent the 
length of the exponent for ModExp and ModExp2 operations. These 
bits also have a second meaning for Copy mode. In Copy mode it's 
a set of dword-granular address offsets. For Copy, [11:8] is 
OffsetSrc and [15:12] is OffsetDest. 
MOD_LEN Length of modulus. Actual modulus length in bits is ModLen*32. 
Actual modulus length must be between 64 and 3,072 bits inclusive 
(ModLen of 2 to 96). The most-significant bit of the value of the 
modulus (not the length) must be a 1. 
Register Description 
This register is used to display the operand lengths of the current operation in the Public Key 
Engine. 





On reset, the value of this register is xxxx_0000_xxxx_0000_0000_0000_x000_0000. 
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6.7.3. Public Operation Register 


Public Operation (Read Only) (BAR1 / 0x2000) + 0x308 


28 27 24 23 22 21 16 15 14 13 





OPCODE M OFFSET B OFFSET A OFFSET 


RESERVED 
RESERVED 
RESERVED 
RESERVED 
































Bit Description 
Field 


2128 PRESERVED Se eee 


27:24 | OPCODE 
Opcode Operation Opcode Operation 
0000 NOP 1000 Dec A 
0001 Add 1001 Mult 
0010 Add w/C 1010 Mod Mult 
0011 Sub 1011 Mod Red 
0100 Sub w/C 1100 Mod Exp 


0101 Mod Add 1101 Optimized Mod Exp 
0110 Mod Sub 1110 Calculate 
Reciprocal 


RESERVED i eee 
operand. Actual Modulus offset is [M Offset]*64 
RESERVED Eee vw ie nee Pe we spe eee ee 


13:8 | B OFFSET Sets the offset from the public base address of the B operand. 
Actual B offset is [B Offset]*64. 


0111 IncA 1111 Cop 


RESERVED Ee eer 
A OFFSET Sets the offset from the public base address of the A operand. 
Actual A offset is [A Offset]*64. 
This register is used to identify the location of the Public Key operands and the Opcode of the 
current operation in the Public Key Engine. 


On reset, the value of this register is xxxx_0000_xx00_0000_xx00_0000_xx00_0000. 
Note 
The only way to stop a public key operation that is in progress is by using the 
Public/RNG Reset register. 
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6.7.4 Public Status Register 


Public Status (Read/Write) (BAR1 / 0x2000) + 0x30C 


28 27 24 23 20 19 1615 





FIFO READ 
COUNTER 


FIFO WRITE 


RESERVED COUNTER 


RESERVED RESERVED RESERVED 


FIFO FULL 
FIFO EMPTY 


laa 
FIFO OVERFLOW |o 
PUBLIC DONE 









































Se 
Field 

31:28 

27:24 Public Key FIFO read counter 

23:20 

19:16 Public Key FIFO write counter 

15:11 


10 FIFO OVERFLOW The Public Key FIFO overflowed. The condition occurs with an 
additional write to the Public Key FIFO when the FIFO FULL bit is 
set. Reset to clear the bit. 


FIFO FULL The Public Key FIFO is full. 
FIFO EMPTY The Public Key FIFO is empty. 


DED RESERVED 

1 CARRY Reports the carry status for the previous Public Key operation 
(ADD, SUB, ADD w/C, SUB w/C, INC, or DEC); otherwise, any 
other operation results in an invalid state. 
For ADD and INC operations, the CARRY bit is set if there is a 
carry out of the MSB; otherwise, it is cleared. 
For SUB and DEC operations, the CARRY bit is set if the result is 
equal to or greater than zero. If the result is less than zero, the 
CARRY bit is cleared. 

PUBLIC DONE Reports that the Public Key Engine is idle. PUBLIC DONE is set 
when FIFO Empty is set and the Public Key Engine is idle. Once 
this bit is set to 1, it remains set. It is cleared by writing a 1 to 
this bit position or by writing an opcode to the Public 
Operation register. Note that there is a copy of this bit in the 
DMA Status and Control register. This bit can be cleared by 
writing a 1 either to PUBLIC DONE in the Public Status 
register or by writing a 1 to PUBLIC DONE in the DMA Status 
and Control register (see section 6.3.5). 

Register Description 
This register reports the status of the public Key engine. 





On reset, the value of this register is xxxx_O000_xxxx_0000_xxxx_x001_xxxx_xx00. 
Note 
Do not access the Public Key memory space while a Public Key operation is being 
performed. The PUBLIC DONE bit in the Public Status register or the DMA 
Status and Control register may be used to determine if a Public Key operation is 
in progress. 


7954/7955/7956 - Hardware User Guide, UG-0034-03 82 
Hifn Confidential 


HI-Fms 


6.7.5 Public Interrupt Enable Register 


Public Interrupt Enable (Read/Write) (BAR1 / 0x2000) + 0x310 





RESERVED 


PUBLIC DONE |© 














Bit 0 is the least significant bit. RESERVED bits must be written with Os and ignored when read. 


Bit Description 
Field 
Ea 


31:1 [RESERVED ( 

PUBLIC DONE If set to 1, the state of the PUBLIC DONE bit in the Public 
Status register is supplied to the DMA Status and Control 
register. An interrupt will be generated when the PUBLIC 
DONE bit in the Public Status register is set to 1, the 
PUBLIC DONE bit in the Public Interrupt Enable Register 
is set, and the PUBLIC DONE bit is set in the DMA 
Interrupt Enable register is set. 

Register Description 


This register enables the Interrupt signal based on the status reported by the Public Status 
register. All fields are R/W, returning the last value written. 





Reset Value = xxxx_XXXX_XXXX_XXXX_XXXX_XXXX_XXXX_XxXxXO 
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6.7.6 Public Key Engine Mode Register 


Public Key Engine Mode (Read/Write) (BAR1 / 0x2000) + 0x320 


oO 





RESERVED 


HOST INVERT | 
PK MODE 

















Bit 0 is the least-significant bit. RESERVED bits must be written with Os and ignored when 


Bit Description 
Field 


1 HOST INVERT If set to one, the address presented to internal Public Key 
memory is inverted. For example, BAR1+ 0x0400 would map 
to internal Public Key memory location OxFFC. 


If set to zero, the address to the Public Key memory is not 
inverted. For example, BAR1+ 0x400 would map to internal 
Public Key memory location 0x000. 


The HOST INVERT bit only affects the address mapping of the 
host interface to internal Public Key memory for loading 
operands and reading results. The address mapping of the 
host interface to Public Key registers is unaffected. The way 
the Public Key engine accesses Public Key memory is 
unaffected. The behavior of address pointers (A, B, and M 
Offset) is unaffected. 

If set to one, the Public Key Engine operates in Enhanced 
Mode; if set to zero, the Public Key Engine operates in 
compatibility mode. 


Use this register to set the Public Key Engine in Enhanced Mode or compatibility mode. 





Reset Value = xxxx_XXXX_XXXX_XXXX_XXXX_XXXX_XXxXX_xx00 
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6.8 7951-Compatible Public Key Engine Registers 


Table 13 7951-Compatible Public Key Engine Registers Summary 


[Name CC PC Address 


7951-Compatible Public Operand (BAR1 / 0x2000) + 
Length 0x304 


0x308 
0x30C 


6.8.1 7951-Compatible Public Operand Length Register 


7951-Compatible Public Operand Length (Read/Write) (BAR1 / 0x2000) + 0x304 





22 21 18 17 





RESERVED RED_LEN EXP_LEN MOD_LEN 




















ee 
Field 
}31:22 [RESERVED ft 

21:18 | RED_LEN Length of reducend. Actual reducend length in bits is 
(RedLen+2)*ModLen*32 (RedLen = 0 to 13). Actual reducend 
length must be less than or equal to 6,144 bits or 15* 

ModLen*32, (RedLen of 13), whichever is smaller. The minimum 
reducend length is 2* ModLen*32 (RedLen of 0). 

17:7 EXP_LEN Length of exponent. Actual exponent length in bits is ExpLen+1. 
Actual exponent length must be between 2 (ExpLen of 1) and the 
actual modulus length (ModLen*32), inclusive. The most- 
significant bit of the value of the exponent (not the length) must 
beal. 

MOD_LEN Length of modulus. Actual modulus length in bits is ModLen*32. 
Actual modulus length must be between 64 and 3,072 bits 
inclusive (ModLen of 2 to 96). The most-significant bit of the 
value of the modulus (not the length) must be a 1. 
Register Description 
This register is used to configure the size of the operands used for public Key operations. 





On reset, the value of this register is xxxx_xxxx_xx00_0000_0000_0000_0000_0000. 


7954/7955/7956 - Hardware User Guide, UG-0034-03 85 
Hifn Confidential 


aoe LD oe | 


6.8.2 7951-Compatible Public Operation Register 


7951-Compatible Public Operation (Read/Write) (BAR1 / 0x2000) + 0x308 


22 21 18 17 





RESERVED OPCODE M OFFSET B OFFSET A OFFSET 


Bit Description 
Field 
31:22 | RESERVED) | 
21:18 | OPCODE 
Opcode Operation 
1000 Dec A 
1001 Mult 
1010 Mod Mult 
Mod Red 
Mod Exp 
Reserved 
Reserved 
Reserved 


operand. Actual Modulus offset is [M Offset]*64. 
Actual B offset is [B Offset]*64. 
Actual A offset is [A Offset]*64. 

Register Description 


This register is used to identify the location of the Public Key operands and to start an operation 
defined by the Opcode. 


On reset, the value of this register is xxxx_xxxx_xx00_0000_0000_0000_0000_ 0000. 
Note 
If the Public Key Engine is performing an operation and another operation is started, 
the current operation is stopped and the engine is restarted with the new operation. 
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6.8.3 7951-Compatible Public Status Register 


7951-Compatible Public Status (Read/Write) (BAR1 / 0x2000) + 0x30C 


pe 
oO 





RESERVED 


PUBLIC DONE 


Bit Description 
Field 


RESERVED [sas See eS SP ey ae ews Sree SS ea 


1 CARRY 


PUBLIC DONE 


Reports the carry status for the previous Public Key operation 
(ADD, SUB, ADD w/C, SUB w/C, INC, or DEC); otherwise, any 
other operation results in an invalid state. 
For ADD and INC operations, the CARRY bit is set if there is a 
carry out of the MSB; otherwise, it is cleared. 
For SUB and DEC operations, the CARRY bit is set if the result is 
equal to or greater than zero. If the result is less than zero, the 
CARRY bit is cleared. 
Reports that the Public Key Engine is idle. Do not access public 
Key operands in Public Key Memory unless the Public-Key-Engine is 
idle. Once this bit is set to 1, it remains set. It is cleared by 
writing a “1” to this bit position or by writing an opcode to the 
Public Operation register. Note that there is a read-only copy 
of this bit in the DMA Status and Control register. 

Register Description 


This register reports the status of the Public Key engine. 





Do not access the Public Key memory space while a 
Public Key operation is being performed. The PUBLIC 
DONE bit in the Public Status register or the DMA 
Status and Conirol register may be used to determine if 
a Public Key operation is in progress. 


Reset Value = xxxx_XXXX_XXXX_XXXX_XXXX_XXXX_XXxXxX_xx00. 
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6.9 Public Key Command FIFO Registers 


The Public Key Command FIFO is mapped to PCI space (BAR1i / 0x2000) + 0x0380 to (BARi 
/ 0x2000) + Ox03FF. The user can issue multiple commands by bursting data into the PCI 
memory region. Note that for each Public Key operation, the operand length has to be 
written into the FIFO before the opcode to ensure the integrity of each command. And there 
is no functional difference between entry numbers. Writing to any FIFO entry number will 
simply put a new length/operand command to the FIFO. 


Bit fields of the Public Operand Length registers and the Public Operation registers are 
defined in Sections 6.7.2 and 6.7.3 respectively. 


The following table shows the memory map of the Public Key Command FIFO. 


Table 14 Public Key Command FIFO Memory Map 


Entry Entry Location 
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6.10 Random Number Generator (RNG) Registers 


The Random Number Generator is based on internal free-running oscillators whose 
frequencies drift relative to each other and to the internal clock of the 795x. The phase 
relation of these signals is unpredictable, and this is used to create entropy to generate a 
random bit stream. 


The output of the random number generator only serves as the raw input to a cryptographic 
process that generates cryptographically secure random numbers. The process required is 
beyond the scope of this specification. Source code of the software required to perform this 
process is available from Hifn. 


The Random Number Generator must be enabled after each reset by setting the RNG 
ENABLE bit in the RNG Configuration register. Once enabled, the generator produces a 
random bit stream. It is important to note that the data obtained from the first read of the 
RNG Data register after a reset should be discarded. 


The Random Number Generator registers are accessed at memory location BAR1 + offset. 
The valid offsets for these register accesses are defined below. 


6.10.1 RNG Configuration Register 


RNG Configuration (Read/Write) (BAR1 / 0x2000) + 0x314 





RESERVED 


Bit jes 
31:1 RESERVED Must be set to zero. 
If set to 1, the Random Number Generator is enabled. Setting 
ANS ENSELS this bit to 0 reduces the power consumption of the device. 
Register Description 
This register enables or disables the functionality of the random number generator. 


0 
Ww 
— 
ra] 
< 
z 
i 
0] 
z 
oc 





On reset, the value of this register is xxxx_xxXxXxX_XXXX_XXXX_XXXX_XXXX_XXXX_XxXxO. 
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6.10.2 RNG Data register 


RNG Data (Read Only) (BAR1 / 0x2000) + 0x318 





RNG DATA 











Bit O is the least significant bit. 


Field 
create cryptographic-quality random numbers. 


Register Description 
Use this register to access random data from the Random Number Generator. The host must 
wait at least 256 PK_clk cycles between reads of the RNG data register. See Section 6.11.1 to 


determine the selected source for the PK_clk clock. 
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6.11 Miscellaneous Registers 


6.11.1 PLL Configuration Register 





The PLL Register must be programmed in the following sequence to 
ensure proper device operation. 





The proper sequence for programming the PLL Configuration Register is as follows: 


First set the charge current for the PLL voltage storage capacitor internally, the PLL 
mulitplier and select the PLL clock source by updating PLL_IS, PLL_ND[2:0] and 
PLL_REF_SEL while clearing PE_CLK_SEL=0, PK_CLK_SEL=O, and setting 
PLL_BP=1. 


Wait 10 ms to allow the PLL to lock to the input clock. 
Clear PLL_BP=O0 while keeping all the other bits as they were in step 1. 


Set PE_CLK_SEL=1 and PK_CLK_SEL=1 while keeping all other bits as the same as they 
were in step 3. 


PLL Configuration (Read/Write) (BAR1 / 0x2000) + 
0x4C 


N 


17 1615 1413 11109 





[2:0] 


RESERVED 


Bit Description 
Field 

RESERVED Must be set to zero. 
7 


RESERVED 


PK_CLK_SEL |w 


RESERVED 
RESERVED (1) 

PE CLK SEL |# 
PLL_REF SEL |o 


PLL_ND 


16 PLL_IS The PLL_IS bit select the charge pump current and must be set as 
follows: 
PLL IS Fck/Fpll_ ref 

0 1-8 

1 9-12 
Fck is the output frequency of the PLL. Fpll_ref is the frequency of the 
selected PLL reference clock (the clock is selected by the 
PLL_REF_SEL bit). See the notes section for a PLL programming 
example. 


RESERVED Must be set to zero. 
4 
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= 1 | PLL_ND[2:0] The PLL_ND bits select the PLL multiplier. 
PLL ND/[4:0] Multiplier Eck 
000 Fpll_ref*2 
001 i Fpll_ref*4 
010 6 Fpll_ref*6 
O11 8 Fpll_ref*8 
100 10 Fpll_ref*10 
101 12 Fpll_ref*12 
110-111 n/a n/a 
Fck = Fpll_ref *(PLL_ND+1)*2 
Fck is the frequency of the PLL output clock. Fpll_ref is the frequency 
of the selected PLL reference clock (the clock is selected by the 
PLL_REF_SEL bit). See the notes section for a PLL programming 
example. PLL_ND settings 110-111 must not be used. 


RESERVED (1) | Must be set to one. 
RESERVED Must be set to zero. 


4 PE_CLK_SEL | This bit selects the Packet Engine clock. When set to 1, the Packet 
Engine clock (PE_clk) equals PE_clk_pre. When 0, the Host Bus 
Interface clock (HBI_CLK) is selected as PE_clk. 
PE_clk_pre = Fck/4 for 7954 (while PLL_BP=0). 
PE_clk_pre =Fpll_ref for all modes when PLL_BP=1). 
3 PK_CLK_SEL | This bit selects the Public Key Engine clock. When set to 1, the Public 
Key Engine clock (PK_clk) equals PK_clk_pre. When 0, the Host Bus 
Interface clock (HBI_CLK) is selected as the PK_clk. 
PK_clk_pre = Fck/2 while PLL_BP=O. 
PE_clk_pre= Fck/2 for 7956 (while PLL_BP=0). 
PK_clk_pre = Fpll_ref while PLL_BP=1. 


1 PLL_BP When set to 1, the PLL_REF clock is passed directly out of the “PLL 
and Dividers” block such that PK_clk_pre = PLL_REF and PE_clk_pre 
= PLL_REF. PLL should be bypassed only during system initialization. 
The host must initialize the PLL to a valid non-bypass state before 
enabling any engines. 


PLL_REF_SEL | Selects either PLL_REF or HBI_CLK as the reference clock for the 
PLL. 
1 = PLL_REF, 0 = HBI_CLK. 


Register Description 
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This register independently selects the clock source for the Packet Engine (PE_clk) and Public 
Key Engine (PK_clk). There are several options available for the clock sources. Either the Host 


Bus Interface clock (HBI_CLK) can be used directly or a synthesized clock from the PLL 
through a divider circuit may be selected. HBI_CLK is PCI_CLK or PQI_CLK depending on 


the bus interface mode that is being used. Refer to Figure 10 for a diagram of the clock circuit. 


- Care must be exercised in initializing the PLL Configuration register to prevent the 
core logic from being over-clocked. 

- The PCI spec allows PCI_CLK to vary over time, to frequencies as low as DC. The 
795x will not operate correctly unless the reference clock is stable. In systems where 
HBI_CLK may vary, PLL_REF must be used as the reference, and it must be stable. 

- PLL should be bypassed only during system initialization. The host must initialize the 
PLL to a valid non-bypass state before enabling any engines. 


Below is a 


Fpll_ref* Fck* 
(MHz) (MHz) PLL_ND |PLL_IS 


PLL programming example: 


Fpe_clk*(MHz) Fpk_clk*(MHz) 
7955 | 7956 | 7954 | 7955 | 7956 


33.33, | 266.67 | 011, | 0 | n/a | 66.67 [133.33] n/a | 133.33 [133.33 
| 66.67 | 266.67 | 001 | O | n/a | 66.67 [133.33] n/a | 133.33 [133.33 


25 


33,33. |-133.39_|. 001 | 0 |33,33 |.33.33 


| 50 | 100 | ooo | Oo | 


133.33_| 000 || 0 | 33.33 _| 33.33 


n/a — not applicable and shouldn't be used since the clock frequency exceeds the 
maximum for 7954. 


Fpll_ref is the frequency of the selected PLL reference clock (the clock is selected by 


the PLL_REF_SEL bit). 

Fpll_ref must be between 20MHz and 100MHz for 7955/7956 

Fpll_ref must be between 20MHz and 66.67MHz for 7954 

Fck must be between 50MHz and 266.67MHz 

Fpe_clk and Fpk_clk must be greater than or equal to Fpci_clk when using the PCI 
host interface 

Fpe_clk must be less than or equal to 33.33MHz for 7954, 66.67MHz for 7955 and 
133.33MHz for 7956 

Fpe_clk equals Fck/4 for 7954/7955 and Fck/2 for 7956 

Fpk_clk must be less than or equal to 66.67MHz for 7954 and 133.33MHz for 
7955/7956 

Fpk_clk = Fck/2 


On Reset, the value of this register is set to Ox00002C02. 
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Figure 10 Clock Circuit 
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[15:14] RESERVED 
[16]  PLLIS 
[31:17] RESERVED 
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6.11.2 Chip ID Register 


(Read Only) (BAR1 / 0x2000) + 0x98 





PRODUCT ID PRODUCT REVISION ID 














Bit Description 
Field 


31:16 | PRODUCT ID The PRODUCT ID represents the identification number for the 
795x and will not change. 
0x0020 = 7954/7955 
0x001D = 7956 

15:0 


PRODUCT The PRODUCT REVISION ID (bits 15-0) represents the actual 
REVISION ID revision number for the 795x. The PRODUCT REVISION ID field 
will increase monotonically with silicon revisions. 
0x0000 = first silicon 
Register Description 


This is a read-only register. This register returns the Product ID and the revision number for 
the 795x. 
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6.12 Status and Shadow Registers 


6.12.1 Global Status Register 


Global Status 


Ww 
a 
Ww 
oO 
N 
oO 
N 
ee) 
N 
N 
N 
(ep) 
N 
ul 
N 


(Read/Write) (BAR1 / 0x2000) + 0xFO 


N 
WwW 
(op) 
as 
WwW 





PE DEST DONE 
PE DEST WAIT 
PE RES DONE 
PE RES WAIT 
PE SRC DONE 
PE SRC WAIT 
PE CMD DONE 
PE CMD WAIT 


RESERVED 


RESERVED 

PE INTERRUPT | 
RESERVED 

DMA INTERRUPT 
RESERVED 


Bit sri 


PACKET ENGINE 
31 DEST DONE 
PACKET ENGINE 
3 DEST WAITING 
PACKET ENGINE 
RESULT DONE 
PACKET ENGINE 
RESULT 
WAITING 
PACKET ENGINE 
SOURCE DONE 
PACKET ENGINE 
SOURCE 
WAITING 
PACKET ENGINE 
25 COMMAND 
DONE 
PACKET ENGINE 
24 COMMAND 
WAITING 
23:8 
7 
INTERRUPT 
4:3 
INTERRUPT 


1:0 RESERVED 


The Packet Engine’s Destination operation has completed and its 
VALID bit has been cleared. 

The Packet Engine is waiting for the VALID bit to be set in the Dest 
descriptor. 

The Packet Engine’s Result operation has completed and its VALID 
bit has been cleared. 


The Packet Engine is waiting for the VALID bit to be set in the 
Result descriptor. 


The Packet Engine’s Source operation has completed and its VALID 
bit has been cleared. 


The Packet Engine is waiting for the VALID bit to be set in the 
Source descriptor. 


The Packet Engine’s Command operation has completed and its 
VALID bit has been cleared. 


The Packet Engine is waiting for the VALID bit to be set in the 
Command descriptor. 


Must be set to zero. 
Set on any abort or overflow 
Must be set to zero. 


Set when an enabled interrupt occurs. 
Must be set to zero. 
Set when an enabled DMA interrupt occurs. 


Must be set to zero. 
Register Description 


This register reports the status of various parts of the 795x. This register, not the Interrupt 
registers, should be used for status polling. 





On reset, the value of this register is OxO00000000. 
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6.12.2 PCI BARO Shadow Register 


PCI BARO Shadow (Read Only) (BART / 0x2000) + 0xCO 





PCI BARO SHADOW 


Field 
this device. 


Register Description 
On reset, the value of this register is undefined. 














6.12.3 PCI BAR1 Shadow Register 


PCI BAR1 Shadow (Read Only) (BAR1 / 0x2000) + 0xC4 





PCI BAR1 SHADOW 


Field 
this device. 


Register Description 
On reset, the value of this register is undefined. 











6.12.4 PCI BAR2 Shadow Register 


PCI BAR2 Shadow (Read Only) (BAR1 / 0x2000) + 0xC8 





PCI BAR2 SHADOW 


Field 
this device. 


Register Description 
On reset, the value of this register is undefined. 





7954/7955/7956 - Hardware User Guide, UG-0034-03 97 
Hifn Confidential 


oe Led | 


7 Public Key Engine 


7.1 Overview 


Public key operations require CPU-intensive math calculations. The Public Key Engine 
reduces the load on the CPU by performing the arithmetic in hardware. 


Public key operations also require a cryptographic-quality random number for a high level of 
security. The Random Number Generator provides an unpredictable number. With minimal 
CPU processing, a cryptographic-quality random number can be made. 


7.2 Public Key Processing 


The 795x uses an advanced Public Key engine equipped with a 16 Opcode FIFO. The Public 
Key engine operates on a batch of modular arithmetic instructions (up to 16) and issues an 
interrupt once the Operand FIFO is empty. Since each modular arithmetic instruction 
execution is host independent, the host is only expected to setup the Public Key engine and 
retrieve the result upon reception of the completion interrupt. 





Host Register Interface 




















4K Byte 


16 Opcode 


Medan Memory Controller oO ae & 
Arithmatic ” a 


raise) Result 
7" 
z ed, FS 
Micro- 


Memory 
Controller Fw | Data Path 
Sequencer i 
Unit 










Call Stack ~) Micro-Controller Unit 











Figure 11 Public-Key Processor 


7.3 Public Key Data Movement 


The Public Key engine assists in performing CPU-intensive modular arithmetic, including 
modular exponentiation. The user first loads operands into the Public Key Memory, sets 
configuration registers, and then issues a starting command and opcode. The CPU 
determines whether the unit is idle or busy by checking the Public Status register. The 
Public Key Engine can function in two modes: Enhanced & 7951-compatible. Following two 
sections describe the data movements for both modes. The Public Key Engine mode 
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selection is determined through device configuration during initialization period. The default 
mode is 7951-compatible. 


Public Key data movement is outlined in following sections. 


7.3.1. Data Movement in Enhanced Mode 
Place source operands in internal Public Key memory. 


Issue commands by writing operand lengths and opcodes to the memory-mapped Public 
Key FIFO space. 


Note 


For each operation, the operand length must be written to the FIFO before the opcode. 
Also, the public key FIFO can hold up to 16 opcodes and lengths at one time. 


When the Public Key engine has completed, the FIFO EMPTY and the PUBLIC DONE bits 
in the Public Status register are set and an interrupt is generated if the interrupt enable bit 
is set. Write one to the PUBLIC DONE bit in the Public Status register or in the DMA 
Control and Status register to clear the interrupt. 

Read the result data from the internal Public Key memory. 


Repeat (go to step 1). 


7.3.2 Data Movement in 7951-Compatible Mode 


Place source operands in internal Public Key Memory. 
Set the 7951-Compatible Public Operand Length register. 


Set the 7951-Compatible Public Operation register. Setting the 7951-Compatible 
Public Operation register starts the Public Key engine. 


When the Public Key engine has completed, the PUBLIC DONE bit in the 7951- 
Compatible Public Status register is set and an interrupt is generated if the interrupt 
enable bit is set. Write one to the PUBLIC DONE bit in the 7951-Compatible Public 
Status register to clear the interrupt. There is also a copy of PUBLIC DONE in the DMA 
Status and Control register that may be used. 


Read the result data from the Public Key Memory. 


Repeat (go to step 1). 


7.4 Operations 


The following table illustrates the operations supported by the Public Key engine. All 
operands and results must be of length ModLen unless otherwise specified. 
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Table 15 Public Key Operations 


See Section 7.6 
Copy Copy A(0)+OffsetSrc*4 to 
B(0)+OffsetDest*4 (byte addresses) 
OffsetSrc is ExpLen[3:0]. OffsetDest is 
:4]. See Section 6.7.2 


7.5 Operands 


All operations use one, two, or three operands. These are labeled A, B, and M for operand 
A, operand B, and the modulus. Each of these operands are actually an array of elements 
in Public Key Memory. The host sets the base address of each array by configuring the A, 
B, and M fields in the Public Operation register. The values written to the A, B, and M 
fields are offsets into Public Key Memory. 





7.5.1. Public Key Operand Storage 


Operands are stored in the Public Key Memory. Public Key Memory is located at (BAR1 / 
0x2000) + 0x0400 through (BAR1 / 0x2000) + Ox13FF. 


Each operand is broken up into a series of 32-bit values. The least significant 32-bit value 
is stored in the lowest address location, and the most significant 32-bit value is stored in the 
highest address location. 


Because data is organized as 32-bit values within Public Key Memory, it is the host's 
responsibility to correctly set endianness configuration registers and the HOST INVERT bit 
in the Public Key Engine Mode register so that data is transferred to the Public Key 
Memory in the proper word order and byte order. 
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For example, if the A Offset is set to 0x0000, operand A with a value of 
0x0001020304050607 would be stored in Public Key Memory as shown below. 


Table 16 Public Key Operand Storage in Internal Public Key Memory 


PCI Address PCI Address Internal Public Key | 32-Bit Value 
(Host Invert=0) (Host Invert=1) Memory Address 


BAR 1 + 0x0400 0x000 0x04050607 
0x00010203 


Table 17 Operand Pointers and Offsets 


[Field [Description 


Length of modulus (ModLen=2 to 96). Actual modulus length in bits is 

Median ModLen*32. Actual modulus length must be between 64 and 3,072 bits 
inclusive. The most significant bit of the va/ue of the modulus (not the 
length) must be a 1. 


Length of reducend. Actual reducend length in bits is 
(RedLen+2)*ModLen*32 (RedLen = 0 to 13). Actual reducend length must 

Radian be less than or equal to 6,144 bits or 15* ModLen*32, (RedLen=13), 
whichever is smaller. The minimum reducend length is 2* ModLen*32 
(RedLen=0). There are no restrictions regarding the most significant bit of 
the va/ue (not the length) of the reducend. 


Length of exponent. Actual exponent length in bits is ExpLen+1. The 
minimum actual exponent length must be 2 (ExpLen=1). The maximum 
actual exponent length must be less than or equal to 3,072 bits 
(ExpLen=3,071) or ModLen*32 (ExpLen=ModLen*32-1), whichever is 
smaller. The most-significant bit of the va/ue of the exponent (not the 
length) must bea 1. 





ExpLen 





Table 18 Example of Field Values and Memory Locations 


Value of Field | Actual Base Address in 
Public Key Memory 


BAR 1 + 0x0400 
BAR 1 + 0x0500 
BAR 1 + 0x0600 





Each operand is an array of elements in Public Key Memory. Each element has a size of 
ModLen, as configured by the host in the Public Operand Length register. The number of 
elements used in each array varies by operation (see below). 


Note 
The results of each operation are stored after operand B, in B(1) and in the case of the 
multiply operation, B(2). In the case of reciprocal, B(0) and in the case of Copy, 
B(0)+4*OffsetDest. 
Mod Red operations destroy the contents of operand A. 


No portion of the Public Key Memory should be modified while the engine is operating. 
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Table 19 Operand Use for Each Operation 


[Operation | Operand A_| Operand B | OperandM’ | Result_ | Scratch 
JAdd CACO) BO) 

|Add w/Carry TACO) BO) BG) 
|Subtract TACO) BO) BG) 
| Subtract w/Carry ss ACO), BO) BG) 
|Mod Add 


Mod Add 


jus] 
BH 


jest iesk ies) 
Ble fe 


> 
[o) 
< 
oO 
ius] 
a 


BO | 


Calculate Reciprocal A(0) fc aa) | (0)° 
OffsetSrc*4 


OffsetDest*4 
Note 





1. Host must clear M(2) prior to starting Mod Exp operation. 
2. M(1) is used to store the reciprocal of M(O). The MSB of M(O) must be a 1. 


3. Operand A is of size, in bytes, [RedLen+2]*[ModLen]*4, up to a maximum of 6144 
bits. The value of RedLen is 0 to 13. 


4. Mod Red operations destroy the contents of operand A. 
5. B(O) is overwritten with the result of the reciprocal. 


Note 
Blank entries are free for system use. 
Byte address of references relative to Public Key Memory: 


A(n)=[A Offset]*64+n*[ModLen]*4, B(n)=[B Offset]*64+n*[{[ModLen]*4, 
M(n)=[M Offset]*64+n*{ModLen]*4. 
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7.5.2 Public Key Memory Usage 


Each public key operation may use up to three operands (A, B, and M) in Public Key 
Memory. The locations in memory of these operands are dependent on the operand offset 
values written into the Public Operation register. The operand offset values are written 
into the Public Operation register with each opcode to be executed. The operand offset 
values must be selected appropriately to provide enough memory for each operand as 
required for that opcode. Each operand consists of an array of storage elements. Each 
storage element is called a chunk and its size is referred to as chunksize. 


Individual memory chunk addresses for each operand are calculated using the following 
equations: 


A(n) =A + n*chunksize 
B(n) = B + n*chunksize 
M(n) =M + n*chunksize 


Note 
All quantities are in bytes. 


Where: 
chunksize = modulus size (ModLen) for the current operation, 4-byte granular 
A =A Offset (64-byte granular, typically set to 0) 
B = B Offset (64-byte granular) 
M = M Offset (64-byte granular) 
A(n) = A operand memory chunk #n address 
B(n) = B operand memory chunk #n address 
M(n) = M operand memory chunk #n address 


Note 
All quantities are in bytes. 


The maximum amount of memory used is calculated with the following equation: 
mem_used = 384 + max_chunksize * 8 


Where: 
mem_used = size of memory space used for the public key operation 
max_chunksize = maximum supported modulus size (ModLen) in bytes, rounded up 
to a multiple of 64-bytes 


General Purpose Example 


Criteria for this example: 
max_chunksize = 384 bytes 


The equations to be used to determine the operand offset addresses are: 
A = 0 (typical A Offset) 
B=A 
M = B + (number of B chunks * max_chunksize) 


Where: 
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size of Aoperand = 384 bytes 

number of B chunks = 3 

number of M chunks = 5 

mem_used = 384 + max_chunksize * 8 


With substitution we get: 
mem_used = 384 + (384 * 8) 
mem_used = 3456 or OxD80 


B=A 
B = 384 or 0x180 


M = B + (number of B chunks * max_chunksize) 
M = 384 + (3 * 384) 
M = 1536 or Ox600 
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Figure 12 illustrates the memory map of the general purpose example. 


























0x1000 
Free 

(640 bytes) 
0x0D80 

CHUNK M(4) 
0xoco0 (384 bytes) 

CHUNK M(3) 
0x0A80 (384 bytes) 

CHUNK M(2) 
0x0900 (384 bytes) 

CHUNK M(1) 
0x0780 (384 bytes) 

CHUNK M(0) 
0x0600 (384 bytes) 

CHUNK B(2) 
0x0480 (384 bytes) 

CHUNK B(1) 
0x0300 (384 bytes) 

CHUNK B(0) 
0x0180 (384 bytes) 

A(0) 

(384 bytes) 

0x0000 
Figure 12 

Note 


Offsets are 64-byte granular. 





M Offset 


€ 0x18 > 
(0x0600 Bytes) 


B Offset 

” oS — 

S=3 A 
x< 8 —< 

SSH Offset 
V~ (0) 


Example Public Key Memory Usage 


Maximum Chunk Size (max_chunksize): 384 bytes 
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7.6 Reciprocal Calculations 


The reciprocal is the key to performing modular reduction with a hardware multiplier 
(otherwise a divide function is required). Normally a reciprocal is thought of as the 
multiplicative inverse of a value: 


if a is the reciprocal of x, then a * x = 1 
where a can be any rational number. 
In the integer realm of public Key cryptography, a reciprocal has a slightly different 
definition—both the modulus and the reciprocal must be integers. This is done by choosing 
an appropriate value for the '1' normally associated with multiplicative inverses. For 


example, if 16-bit values are being dealt with: 


OxABCD 
? 


x 
a 


and a 16-bit reciprocal is wanted, the '1' is represented by a one followed by 32 zeros. The 
reciprocal is computed by: 


a = 0x100000000/x = 0x100000000/0xABCD = 0x17D77 


The result of integer division is just the integer quotient—any remainder is ignored. This 
reciprocal is an approximation, since a * x is somewhat less than 0x100000000. 


Note that the 16-bit reciprocal is really 17 bits long. The choice of a '1' value determined 
this, since 33 bits divided by 16 bits gives at least a 17-bit result. If the '1' is defined to be 
32 bits instead of 33 and it is assumed that the top bit of the modulus is always set, then 
the reciprocal is fixed at 16 bits: 


a = 0x80000000/0xABCD = OxBEBB 


For other sized reciprocals, a'1' is defined that has only the top bit set of a value of bit 
length: 


modulus_bits + reciprocal_bits 


Note the reciprocal, while being well behaved, is smaller than the true reciprocal by a factor 
of two. The Public Key engine automatically restores this factor. 


Logically, these are the steps to calculate a reciprocal: 


N = a single 1, followed by ((Modulus Length * 2) - 1) zeros. 
For example, for a 512 bit modulus , N = 1 followed by 1023 zeros (binary number 
representation). 


RECIPROCAL = N divided by MODULUS. 
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The two-step method described above may prove to be very CPU-intensive. To alleviate 
this problem, the Public Key engine provides an instruction to aid in the calculation of a 
suitable reciprocal. 


To summarize the steps involved in generating a reciprocal: 


If the modulus is 0x800...000, this algorithm will not work. Check for this condition, and 
if it is true then use the reciprocal OxFFF...FFF, and skip all further steps. 


Sets preliminary reciprocal to zero 


Set top chunk (word, byte) of preliminary reciprocal to bit inverse of the top chunk 
(word, byte) of the modulus 


Set the top bit of the preliminary reciprocal 
Load modulus into A(O) and load preliminary reciprocal into B(O) 


Set ExpLen = log2(reciprocal bit length) and set ModLen = (reciprocal bit length / 32) 


Note 
As an alternative to using log2 (reciprocal bit length), the value ExpLen=12 works for all 
cases up to and including 3K reciprocals. 


Issue the Calculate Reciprocal command and wait for PUBLIC DONE. 
Set tempimsb = the most significant bit of M(3) 
Set reciprocal = B(0) 


If tempimsb equals 0, then reciprocal is your final answer. If not, the CPU needs to do 
step 11. 


CPU performs the following sequence to clean-up reciprocal: 


while (1) 
templ = reciprocal * modulus 
if (templ[most significant bit] ) 
reciprocal = reciprocal - 1 
else 
break 


The reciprocal can be precomputed once for a given modulus, then stored with the modulus. 


Note 

The modulus reciprocal is necessary for Mod Mult, Mod Red, and Mod Exp operations. 
If an inappropriate value for the modulus reciprocal is provided, the Public Key engine 
may never complete the operation, the PUBLIC DONE bit will never be set and the 
public done interrupt, if enabled, will not be generated. In the 7951-compatible mode, 
starting a NOP, or any operation, will stop the Public Key engine and restart it with the 
new operation. In the enhanced mode, the only way to stop the Public Key engine is to 
issue a Public Key reset using the Public/RNG Reset register. 
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| Document Revision History 


Documentation changes include additions, deletions, and modifications made to this 
document. This section identifies the changes made in each release of the document. 


1.1 Document Revision 01 


Update 1. — Clarification was added to the descriptions for the 
CMD_SWAP8/CMD_SWAP32, SRC_SWAP8/SRC_SWAP32, DEST_SWAP8/DEST_SWAP32, 
and RSLT_SWAP8/RSLT_SWAP32 bits in the Command, Source, Destination, and Result 
Descriptors. Sections 2.1, 2.2, 2.3, and 2.4, pages 8-12. 


Update 2. The PAD MOD LENGTH bit in the Pad Command Structure was reworded for 
clarity. Section 3.1.5, page 24. 


Update 38. The DCMP SUCCESS bit description in the Compression Result Structure was 
reworded for clarification. Section 3.2.2, page 36. 


Update 4. ‘The address for the DMA Configuration #2 register was corrected. Section 
6.2, page 51, Table 7. Section 6.3, page 52, Table 8. 


Update 5. ‘The description for the DMA Interface registers was corrected. Section 6.3, 
page 52, first paragraph. 


Update 6. ‘The reset value for the DMA Configuration #2 register was corrected. Section 
6.3.8, page 61. 


Update 7. ‘The reset value for the Packet Engine Status register was corrected. Section 
6.5.5, page 68. 


Update 8. The MAC Mute Table Entry register address was changed to an address range. 
Section 6.6.1, page 69. 


Update 9. The required wait time between reads of the RNG Data register was added to 
the description. Section 6.10.2, page 81. 


Update 10. The length of the PLL_IS[1:0] field in the PLL Configuration register was 
changed from two bits to one bit. The PLL_IS[1] bit was changed to RESERVED. Section 
6.11.1, page 82. 


Update 11. The length of the PLL_ND[4:0] field in the PLL Configuration register was 
changed from five bits to three bits. The PLL_ND[4:3] bits were changed to RESERVED. 
Section 6.11.1, page 82. 


Update 12. Bit 10 in the PLL Configuration register was changed from PLL_NDRST to 
RESERVED (1). Section 6.11.1, page 82. 


Update 13. The name for bit four in the PLL Configuration register was changed from 
SE_CLK_SEL to PE_CLK_SEL. Section 6.11.1, page 82. 


Update 14. The descriptions for the SE_CLK_SEL, PK_CLK_SEL, and PLL_BP bits in the 
PLL Configuration register were changed for clarity. Section 6.11.1, page 82. 
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Update 15. The PLL programming example in the PLL Configuration register was updated. 
Section 6.11.1, page 83. 


Update 16. The note for the Fck clock frequency range in the PLL Configuration register 
description was changed. Section 6.11.1, page 83. 


Update 17. The reset value for the PLL Configuration register was corrected. Section 
6.11.1, page 83. 


Update 18. The Clock Circuit diagram was corrected to correspond to the changes made 
to the PLL Configuration register changes. Section 6.11.1, Figure 10, page 84. 


.1 Document Revision 02 


Update 19. Added new section on PCI Initialization Overview. Section 1.4, pages 4, 5. 


Update 20. Added description of muting table feature and how to set the values of the 
MAC Mute Table Entry register. Section 6.6, 6.6.1, pages 71, 72. 


Update 21. Added proper programming sequence for the PLL Configuration register. 
Section 6.11.1, page 85. 


lll.1 Document Revision 03 


Update 22. Updated template. 
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